CVE-2025-43537

Vulnerability

Overview

CVE-2025-43537 is a path handling issue in iOS and iPadOS that arises from insufficient validation during the backup restoration process. The flaw allows a specially crafted backup file to bypass normal file system protections, enabling modification of protected system files [1][2].

Exploitation

Prerequisites

An attacker must deliver a maliciously crafted backup file to the target device and convince the user to restore it. This could be achieved through physical access or social engineering, such as tricking the user into restoring a backup from an untrusted source. No additional authentication is required beyond the normal backup restoration flow.

Impact

Successful exploitation leads to modification of protected system files, which could allow an attacker to alter system behavior, escalate privileges, or establish persistent unauthorized access. The severity is rated Medium (CVSS 5.5) due to the requirement for user interaction and physical access or social engineering.

Mitigation

Apple has addressed the issue in iOS 18.7.5 and iPadOS 18.7.5 for older devices, and iOS 26.2 and iPadOS 26.2 for newer models [1][2]. Users are advised to update to the latest available version. No workarounds have been published.