Vulnerability Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Ipados | < 15.8.5 |
| Apple | Iphone Os | < 15.8.5 |
| Apple | Macos | >= 13.0, < 13.7.8 |
Related Weaknesses (CWE)
References
- https://support.apple.com/en-us/124925Release NotesVendor Advisory
- https://support.apple.com/en-us/124926Release NotesVendor Advisory
- https://support.apple.com/en-us/124927Release NotesVendor Advisory
- https://support.apple.com/en-us/124928Release NotesVendor Advisory
- https://support.apple.com/en-us/124929Release NotesVendor Advisory
- https://support.apple.com/en-us/125141Release NotesVendor Advisory
- https://support.apple.com/en-us/125142Release NotesVendor Advisory
- http://seclists.org/fulldisclosure/2025/Sep/10Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/14Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/52Mailing ListThird Party Advisory
- https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.mdExploitThird Party Advisory
- https://github.com/cisagov/vulnrichment/issues/201Issue Tracking
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-US Government Resource
FAQ
What is CVE-2025-43300?
CVE-2025-43300 is a vulnerability with a CVSS score of 10.0 (CRITICAL). An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7...
How severe is CVE-2025-43300?
CVE-2025-43300 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-43300?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Ipados, Apple Iphone Os, Apple Macos.