Out-of-Bounds Read Vulnerability in Apple Products
CVE-2025-43265

4MEDIUM

Key Information:

Vendor

Apple
Status
Safari
Mac OS
TV OS
Visionos
Vendor
CVE Published:
30 July 2025

What is CVE-2025-43265?

This vulnerability involves an out-of-bounds read that could potentially allow an attacker to access sensitive internal application states through maliciously crafted web content. With suitable input validation improvements, Apple has addressed this issue in multiple updates, including watchOS 11.6 and iOS 18.6, enhancing the security posture of its operating systems against such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iOS and iPadOS < 18.6

macOS < 15.6

Safari < 18.6

References

https://support.apple.com/en-us/124152
https://support.apple.com/en-us/124149
https://support.apple.com/en-us/124153

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.