CVE-2025-43187

CVE-2025-43187

High · published August 29, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00232 · 13.3th percentile
Published
2025-08-29T05:15Z
Affected products (3)
ProductVersionsFixed in
apple/macos≥ 13.0, < 13.7.713.7.7
apple/macos≥ 14.0, < 14.7.714.7.7
apple/macos≥ 15.0, < 15.615.6
References (6)
https://support.apple.com/en-us/124149 · [email protected]https://support.apple.com/en-us/124150 · [email protected]https://support.apple.com/en-us/124151 · [email protected]http://seclists.org/fulldisclosure/2025/Jul/32 · af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2025/Jul/33 · af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2025/Jul/34 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 AUG 00:28Z
    This issue was addressed by removing the vulnerable code
    cvelistv5