CVE-2025-43210
Received Received - Intake
Out-of-Bounds Access in Apple Media Processing Causes Memory Corruption

Publication date: 2026-04-02

Last updated on: 2026-04-03

Assigner: Apple Inc.

Description
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-02
Last Modified
2026-04-03
Generated
2026-06-16
AI Q&A
2026-04-02
EPSS Evaluated
2026-06-15
NVD
CVE-2025-43210
EUVD
EUVD-2025-209193
Affected Vendors & Products
Showing 9 associated CPEs
Vendor Product Version / Range
apple macos From 14.0 (inc) to 14.7.7 (exc)
apple macos From 15.0 (inc) to 15.6 (exc)
apple iphone_os to 18.6 (exc)
apple tvos to 18.6 (exc)
apple visionos to 2.6 (exc)
apple watchos to 11.6 (exc)
apple ipados to 17.7.9 (exc)
apple ipados From 18.0 (inc) to 18.6 (exc)
apple macos From 13.0 (inc) to 13.7.7 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds access issue that occurs when processing a maliciously crafted media file. It happens because the software does not properly check the bounds of data, which can lead to accessing memory outside the intended area.

The issue has been addressed by improving bounds checking in affected Apple operating systems such as iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Impact Analysis

Exploiting this vulnerability by processing a maliciously crafted media file may cause unexpected app termination or corrupt process memory.

This could lead to application crashes or potentially allow further exploitation depending on how the corrupted memory is used.

Mitigation Strategies

To mitigate this vulnerability, update your Apple devices to the fixed versions of the operating systems as soon as possible.

  • iOS 18.6
  • iPadOS 18.6 and iPadOS 17.7.9
  • macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7
  • tvOS 18.6
  • visionOS 2.6
  • watchOS 11.6

Avoid processing any untrusted or maliciously crafted media files until the update is applied.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-43210. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart