Product: tvOS, watchOS, visionOS, macOS Tahoe, iOS, iPadOS Summary The issue was addressed with improved input validation. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory. This vulnerability affects multiple Apple operating systems. Details SeverityBase ScoreCVEHIGH7.8CVE-2025-43372 Exploitation To exploit this vulnerability, an attacker must craft a malicious media file and convince a user to process it on a vulnerable device. This requires local access or network access, depending on the specific attack vector. Successful exploitation can lead to app crashes or memory corruption. Affected Products tvOS 26: Affected by input validation issues leading to potential app termination.watchOS 26: Vulnerable to processing malicious media files.visionOS 26: May experience unexpected behavior due to this vulnerability.macOS Tahoe 26: Susceptible to crashes from crafted media files.iOS 26: Can be exploited through malicious media processing.iPadOS 26: Vulnerable to similar issues as iOS. Mitigation Users are advised to update their devices to the latest versions of the affected operating systems to mitigate this vulnerability. Apple has released updates that address the input validation issues, ensuring that devices are protected against potential exploitation. References Apple Security Advisory 125108Apple Security Advisory 125110Apple Security Advisory 125114Apple Security Advisory 125115Apple Security Advisory 125116
