Medium severity5.5CISA KEVNVD Advisory· Published Dec 12, 2025· Updated Apr 3, 2026
CVE-2025-43520
CVE-2025-43520
Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <18.7.2
- cpe:2.3:o:apple:ipados:26.0:*:*:*:*:*:*:*
- (no CPE)range: <18.7.2
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*range: <18.7.2
- cpe:2.3:o:apple:iphone_os:26.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=14.0,<14.8.2
- cpe:2.3:o:apple:macos:26.0:*:*:*:*:*:*:*
- (no CPE)range: <15.7.2
- Range: <18.7.2
Patches
Vulnerability mechanics
References
10- support.apple.com/en-us/125632nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125633nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125634nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125635nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125636nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125637nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125638nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125639nvdRelease NotesVendor Advisory
- cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/nvdTechnical Description
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
1- The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat ActorsMandiant Threat Intelligence · Mar 18, 2026