Medium severity5.5CISA KEVNVD Advisory· Published Dec 12, 2025· Updated Jun 17, 2026
CVE-2025-43520
CVE-2025-43520
Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <18.7.2
- cpe:2.3:o:apple:ipados:26.0:*:*:*:*:*:*:*
- (no CPE)range: iPadOS 18.7.2
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*range: <18.7.2
- cpe:2.3:o:apple:iphone_os:26.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=14.0,<14.8.2
- cpe:2.3:o:apple:macos:26.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <26.1
- (no CPE)range: tvOS 26.1
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*range: <26.1
- (no CPE)range: visionOS 26.1
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <26.1
- (no CPE)range: watchOS 26.1
- Range: macOS Sequoia 15.7.2
- Range: macOS Sonoma 14.8.2
- Range: macOS Tahoe 26.1
- Range: iOS 18.7.2
Patches
Vulnerability mechanics
References
10- support.apple.com/en-us/125632nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125633nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125634nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125635nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125636nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125637nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125638nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125639nvdRelease NotesVendor Advisory
- cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/nvdTechnical Description
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
2- Coruna, DarkSword iOS Exploits Proliferate GloballyDark Reading · Aug 10, 2026
- The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat ActorsMandiant Threat Intelligence · Mar 18, 2026