Paper/Archive/CVE-2025-43234

CVE-2025-43234

Apple iOS and iPadOS — Multiple memory corruption issues were addressed with improved input validation.

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 64.3.643 × 2012.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted texture may lead to unexpected app termination.

Affected

ProductAffectedFixed inSource

iOS and iPadOS< 18.618.6CNA

macOS< 15.615.6CNA

tvOS< 18.618.6CNA

visionOS< 2.62.6CNA

watchOS< 11.611.6CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/124147 refsupport.apple.com/en-us/124149 refsupport.apple.com/en-us/124153 refsupport.apple.com/en-us/124154 refsupport.apple.com/en-us/124155 refseclists.org/fulldisclosure/2025/Jul/37 refseclists.org/fulldisclosure/2025/Jul/35 refseclists.org/fulldisclosure/2025/Jul/32 refseclists.org/fulldisclosure/2025/Jul/30