CVE-2025-43374
Last modified
CVE-2025-43374 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.5, visionOS 2.5, watchOS 11.5. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.5, visionOS 2.5, watchOS 11.5. An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory.
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Ipados | < 17.7.7 |
| Apple | Ipados | >= 18.0, < 18.5 |
| Apple | Iphone Os | < 18.5 |
| Apple | Macos | < 13.7.3 |
| Apple | Macos | >= 14.0, < 14.7.3 |
| Apple | Macos | >= 15.0, < 15.5 |
| Apple | Visionos | < 2.5 |
| Apple | Watchos | < 11.5 |
References
- https://support.apple.com/en-us/122069Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122070Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122404Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122405Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122716Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122721Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122722Release Notes, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-43374?
How severe is CVE-2025-43374?
How do I fix CVE-2025-43374?
Are you affected by CVE-2025-43374?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST