Out-of-bounds Read Vulnerability in Apple Software Products
CVE-2025-43226

4MEDIUM

Key Information:

Vendor: Apple
Status: iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 30 July 2025

What is CVE-2025-43226?

An out-of-bounds read vulnerability exists in several Apple software products. This security flaw arises from inadequate input validation when processing maliciously crafted images, potentially leading to unauthorized disclosure of process memory. Users are encouraged to update their devices to the latest versions to mitigate risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS < 18.6

iPadOS < 17.7

macOS < 15.6

References

https://support.apple.com/en-us/124148

https://support.apple.com/en-us/124149

https://support.apple.com/en-us/124153

CVSS V3.1

Score:

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 30, 2025

JSON