Product:
iOS
Summary
A memory corruption issue was addressed with improved lock state checking. A malicious application may cause unexpected changes in memory shared between processes. This issue is fixed in multiple versions of Apple’s operating systems including watchOS, iOS, iPadOS, macOS, visionOS, and tvOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-43510 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable device. The application could manipulate memory shared between processes, potentially leading to unauthorized access or modification of sensitive data. User interaction is required to install and run the malicious application, making social engineering tactics a likely component of the attack.
Affected Products
- watchOS 26.1
- iOS 18.7.2
- iPadOS 18.7.2
- macOS Tahoe 26.1
- visionOS 26.1
- tvOS 26.1
- macOS Sonoma 14.8.2
- macOS Sequoia 15.7.2
- iOS 26.1
- iPadOS 26.1
Mitigation
Apply mitigations as per vendor instructions and follow applicable BOD 22-01 guidance for cloud services. If mitigations are unavailable, consider discontinuing use of the affected product to prevent exploitation.