Mail Header Parsing Vulnerability in Apple Products
CVE-2025-43494

7.5HIGH

Key Information:

Vendor

Apple
Status
Mac OS
Visionos
Watch OS
iOS And iPad OS
Vendor
CVE Published:
12 December 2025

What is CVE-2025-43494?

A vulnerability involving mail header parsing has been discovered in Apple's software products. This issue can potentially enable an attacker to induce a persistent denial-of-service condition by exploiting insufficient checks in mail header parsing. Apple has addressed these vulnerabilities in updates across multiple platforms including iOS, macOS, watchOS, and visionOS. It is crucial for users to update to the latest software versions to safeguard against potential threats.

Affected Version(s)

iOS and iPadOS < 26.1

iOS and iPadOS < 18.7

macOS < 14.8

References

https://support.apple.com/en-us/125636
https://support.apple.com/en-us/125634
https://support.apple.com/en-us/125638

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-43494 : Mail Header Parsing Vulnerability in Apple Products