Product:
macOS, visionOS, iOS, iPadOS
Summary
An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory. This issue is fixed in several versions of macOS, visionOS, iOS, and iPadOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.3 | CVE-2025-43400 |
Exploitation
To exploit this vulnerability, an attacker can create a maliciously crafted font and deliver it to a target system. When the target processes the font, it may trigger the out-of-bounds write issue, leading to unexpected behavior such as app termination or memory corruption. User interaction is required to open or use the malicious font.
Affected Products
- macOS Sonoma
- macOS Tahoe
- macOS Sequoia
- visionOS
- iOS
- iPadOS
Mitigation
To mitigate this vulnerability, users should update their systems to the latest versions of macOS, visionOS, iOS, and iPadOS as specified in the security updates. Regularly applying updates can help protect against known vulnerabilities.