CVE-2025-43494

Vulnerability

Details A mail header parsing issue in Apple operating systems could allow an attacker to cause a persistent denial-of-service. The problem was addressed with improved checks in the mail processing logic.

Exploitation

An attacker could exploit this vulnerability by sending a specially crafted email message to the target device. The attack likely requires no user interaction beyond receiving the email, and the attacker does not need any special network access other than being able to deliver the malicious email.

Impact

Successful exploitation results in a persistent denial-of-service condition, potentially rendering the device's mail functionality unusable until the malformed data is cleared or the device is restored.

Mitigation

Apple has released security updates for multiple operating systems, including iOS 26.1 [2], iPadOS 26.1 [2], macOS Tahoe 26.1 [1], macOS Sequoia 15.7.2 [3], macOS Sonoma 14.8.2 [4], and others. Users should update to the latest versions to protect against this vulnerability.