Data Redaction Flaw in Apple iOS and iPadOS Software
CVE-2025-43475

5.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Vendor
CVE Published:
17 December 2025

What is CVE-2025-43475?

A vulnerability has been identified in Apple iOS and iPadOS related to logging that could potentially allow applications to access sensitive user information. This logging issue has been addressed through improved data redaction in the latest software updates. Users are encouraged to update their devices to iOS 26.2 and iPadOS 26.2 to mitigate any risks associated with this flaw.

Affected Version(s)

iOS and iPadOS < 26.2

References

https://support.apple.com/en-us/125884

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-43475 : Data Redaction Flaw in Apple iOS and iPadOS Software