Out-of-Bounds Read in Apple Kernel Affects Multiple Devices

CVE-2025-43374

What is CVE-2025-43374?

An out-of-bounds read vulnerability has been identified in Apple's kernel, potentially allowing an attacker in physical proximity to read sensitive information from kernel memory. This issue arises from insufficient bounds checking, which can lead to unauthorized access to memory regions that should be protected. The vulnerability affects multiple Apple operating systems, including iPadOS, iOS, macOS, and visionOS. Users are encouraged to update their devices to the latest versions to mitigate the risk associated with this vulnerability.

References