Critical severity10.0CISA KEVNVD Advisory· Published Aug 21, 2025· Updated Apr 3, 2026
CVE-2025-43300
CVE-2025-43300
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
Affected products
3Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.mdnvdExploitThird Party Advisory
- seclists.org/fulldisclosure/2025/Sep/10nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Sep/14nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Sep/52nvdMailing ListThird Party Advisory
- support.apple.com/en-us/124925nvdRelease NotesVendor Advisory
- support.apple.com/en-us/124926nvdRelease NotesVendor Advisory
- support.apple.com/en-us/124927nvdRelease NotesVendor Advisory
- support.apple.com/en-us/124928nvdRelease NotesVendor Advisory
- support.apple.com/en-us/124929nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125141nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125142nvdRelease NotesVendor Advisory
- github.com/cisagov/vulnrichment/issues/201nvdIssue Tracking
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.