Out-of-Bounds Write Vulnerability in macOS by Apple
CVE-2025-43380

5.5MEDIUM

Key Information:

Vendor

Apple
Status
Mac OS
Vendor
CVE Published:
4 November 2025

What is CVE-2025-43380?

An out-of-bounds write vulnerability exists in Apple’s macOS, which could allow for unexpected application terminations. This issue arises during file parsing and has been resolved through enhanced input validation in the latest versions of macOS Sonoma and Sequoia.

Affected Version(s)

macOS < 14.8

macOS < 15.7

References

https://support.apple.com/en-us/125636
https://support.apple.com/en-us/125635

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-43380 : Out-of-Bounds Write Vulnerability in macOS by Apple