Paper/Archive/CVE-2025-43186

CVE-2025-43186

Apple iOS and iPadOS — The issue was addressed with improved memory handling.

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 69.8.698 × 2014.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Parsing a file may lead to an unexpected app termination.

Affected

ProductAffectedFixed inSource

iOS and iPadOS< 18.618.6CNA

macOS< 13.7.713.7.7CNA

macOS< 14.7.714.7.7CNA

macOS< 15.615.6CNA

tvOS< 18.618.6CNA

visionOS< 2.62.6CNA

watchOS< 11.611.6CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/124147 refsupport.apple.com/en-us/124149 refsupport.apple.com/en-us/124150 refsupport.apple.com/en-us/124151 refsupport.apple.com/en-us/124153 refsupport.apple.com/en-us/124154 refsupport.apple.com/en-us/124155 refseclists.org/fulldisclosure/2025/Jul/37 refseclists.org/fulldisclosure/2025/Jul/36 refseclists.org/fulldisclosure/2025/Jul/34 refseclists.org/fulldisclosure/2025/Jul/33 refseclists.org/fulldisclosure/2025/Jul/32 refseclists.org/fulldisclosure/2025/Jul/30