CVE-2025-43210
Out-of-Bounds Access in Apple Media Processing Causes Memory Corruption
Publication date: 2026-04-02
Last updated on: 2026-04-03
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | macos | From 14.0 (inc) to 14.7.7 (exc) |
| apple | macos | From 15.0 (inc) to 15.6 (exc) |
| apple | iphone_os | to 18.6 (exc) |
| apple | tvos | to 18.6 (exc) |
| apple | visionos | to 2.6 (exc) |
| apple | watchos | to 11.6 (exc) |
| apple | ipados | to 17.7.9 (exc) |
| apple | ipados | From 18.0 (inc) to 18.6 (exc) |
| apple | macos | From 13.0 (inc) to 13.7.7 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds access issue that occurs when processing a maliciously crafted media file. It happens because the software does not properly check the bounds of data, which can lead to accessing memory outside the intended area.
The issue has been addressed by improving bounds checking in affected Apple operating systems such as iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
How can this vulnerability impact me? :
Exploiting this vulnerability by processing a maliciously crafted media file may cause unexpected app termination or corrupt process memory.
This could lead to application crashes or potentially allow further exploitation depending on how the corrupted memory is used.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update your Apple devices to the fixed versions of the operating systems as soon as possible.
- iOS 18.6
- iPadOS 18.6 and iPadOS 17.7.9
- macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7
- tvOS 18.6
- visionOS 2.6
- watchOS 11.6
Avoid processing any untrusted or maliciously crafted media files until the update is applied.