Product:
iOS
Summary
A memory corruption issue was addressed with improved memory handling. A malicious application may be able to cause unexpected system termination or write kernel memory. This issue affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2025-43520 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable device. The application could leverage the memory corruption issue to manipulate kernel memory, potentially leading to system crashes or unauthorized access to sensitive data.
Affected Products
- watchOS: Affected by memory corruption issues leading to system termination.
- iOS: Vulnerable to exploitation through malicious applications.
- iPadOS: Similar vulnerabilities as iOS, allowing for potential system compromise.
- macOS Tahoe: Includes the same memory handling issues.
- visionOS: Affected by the same vulnerabilities as other Apple operating systems.
- tvOS: Vulnerable to the same memory corruption issues.
- macOS Sonoma: Contains the memory corruption vulnerability.
- macOS Sequoia: Also affected by the memory handling issue.
Mitigation
To mitigate this vulnerability, users should apply the latest updates provided by Apple. If updates are not available, following the applicable BOD 22-01 guidance for cloud services is recommended, or discontinuing use of the affected product may be necessary.