Product:
macOS
Summary
An out-of-bounds read was addressed with improved bounds checking. This issue may allow an app to disclose coprocessor memory. The vulnerability is fixed in macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43366 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable system. The app could potentially read sensitive coprocessor memory, leading to unauthorized information disclosure. User interaction is required to execute the malicious application, making it necessary for the attacker to trick the user into running it.
Affected Products
- macOS Tahoe 26: The latest version that addresses the out-of-bounds read issue.
Mitigation
To mitigate this vulnerability, users should update to macOS Tahoe 26 or later. Regularly applying security updates and patches is essential to protect against known vulnerabilities.