Product:
tvOS, macOS, iOS, iPadOS, visionOS, watchOS
Summary
A type confusion issue was addressed with improved memory handling. This issue may allow an app to cause a denial-of-service. The issue has been fixed in several versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43355 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable device. The app could leverage the type confusion issue to manipulate memory, potentially leading to a denial-of-service condition. User interaction is required to execute the malicious app, making it necessary for the attacker to trick the user into installing or running it.
Affected Products
- tvOS: Affected by the type confusion issue, leading to potential denial-of-service.
- macOS Sonoma: Vulnerable to the same issue, fixed in version 14.8.
- macOS Sequoia: Includes the vulnerability, addressed in version 15.7.
- iOS: Affected versions include 18.7 and 26, both fixed.
- iPadOS: Similar vulnerabilities in versions 18.7 and 26.
- visionOS: Vulnerable in version 26, now fixed.
- watchOS: Affected by the type confusion issue, addressed in version 26.
- macOS Tahoe: Vulnerable in version 26, fixed in the latest update.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated to the latest versions of the operating systems. Regularly checking for updates and applying them promptly can help protect against potential exploits related to this issue.