Product:
iOS
Summary
A path handling issue was addressed with improved validation. This issue may allow a maliciously crafted backup file to modify protected system files. The vulnerability has been fixed in iOS 18.7.5 and iPadOS 18.7.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43537 |
Exploitation
To exploit this vulnerability, an attacker must have access to a device and be able to restore a maliciously crafted backup file. This requires local access to the device, and user interaction is necessary to initiate the restore process. Once the backup is restored, it may lead to unauthorized modifications of protected system files.
Affected Products
- iOS 18.7.5 – Fixed the path handling issue with improved validation.
- iPadOS 18.7.5 – Addressed the same vulnerability as in iOS.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest version of iOS or iPadOS. Regularly updating software helps protect against known vulnerabilities and ensures that security improvements are applied.