CVE-2025-43205CWE-125

CVE-2025-43205

Medium · published November 12, 2025

CVSS v3.1

4.0

EPSS

Percentile

4.7

In the wild

Unconfirmed

What it is

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to bypass ASLR.

The record

Technical detail

CVSS v3.1: 4.0 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00159 · 4.7th percentile
Weakness: CWE-125 · Out-of-bounds Read
Published: 2025-11-12T06:15Z

Affected products (5)

Product	Versions	Fixed in
apple/ipados	< 18.4	18.4
apple/iphone_os	< 18.4	18.4
apple/tvos	< 18.4	18.4
apple/visionos	< 2.4	2.4
apple/watchos	< 11.4	11.4

References (8)

https://support.apple.com/en-us/122371 · [email protected]https://support.apple.com/en-us/122372 · [email protected]https://support.apple.com/en-us/122373 · [email protected]https://support.apple.com/en-us/122374 · [email protected]https://support.apple.com/en-us/122375 · [email protected]https://support.apple.com/en-us/122376 · [email protected]https://support.apple.com/en-us/122377 · [email protected]https://support.apple.com/en-us/122378 · [email protected]

EPSS history

Timeline

12 NOV 00:20Z
An out-of-bounds access issue was addressed with improved bounds checking
cvelistv5