CVE-2025-43221

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

• CWE-125

• https://support.apple.com/en-us/124147Release Notes, Vendor Advisory
• https://support.apple.com/en-us/124149Release Notes, Vendor Advisory
• https://support.apple.com/en-us/124153Release Notes, Vendor Advisory
• https://support.apple.com/en-us/124154Release Notes, Vendor Advisory
• http://seclists.org/fulldisclosure/2025/Jul/30
• http://seclists.org/fulldisclosure/2025/Jul/32
• http://seclists.org/fulldisclosure/2025/Jul/36
• http://seclists.org/fulldisclosure/2025/Jul/37

Published

Jul 30, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-43216A use-after-free issue was addressed with improved memory ma…6.5
• CVE-2025-43217The issue was addressed by adding additional logic. This iss…4
• CVE-2025-43218An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2025-43219The issue was addressed with improved memory handling. This …8.8
• CVE-2025-4322The Motors theme for WordPress is vulnerable to privilege es…9.8
• CVE-2025-43220This issue was addressed with improved validation of symlink…9.8
• CVE-2025-43222A use-after-free issue was addressed by removing the vulnera…9.8
• CVE-2025-43223A denial-of-service issue was addressed with improved input …7.5
• CVE-2025-43224An out-of-bounds access issue was addressed with improved bo…7.1
• CVE-2025-43225A logging issue was addressed with improved data redaction. …5.5
• CVE-2025-43226An out-of-bounds read was addressed with improved input vali…4
• CVE-2025-43227This issue was addressed through improved state management. …7.5