CVE-2025-43361CWE-125

CVE-2025-43361

High · published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds read can lead a malicious app to peek into sensitive kernel memory! This vulnerability affects multiple Apple platforms, so don’t let your guard down. 🔥 Think of it like a sneaky janitor who finds an unlocked door to the server room and starts reading confidential documents left on the table—it's all about accessing information that shouldn’t be visible. 📁 If exploited, this vulnerability could allow attackers to access confidential kernel data, leading to potential data leaks or system compromise. This is an alarming scenario for any user, as it could put sensitive information and overall device security at risk!

Put simply

Think of it like a sneaky janitor who finds an unlocked door to the server room and starts reading confidential documents left on the table—it's all about accessing information that shouldn’t be visible. 📁 The vulnerability arises from inadequate bounds checking during memory read operations, enabling apps to read beyond their allocated memory space and potentially access the kernel's secure memory regions.

What to do

If exploited, this vulnerability could allow attackers to access confidential kernel data, leading to potential data leaks or system compromise. This is an alarming scenario for any user, as it could put sensitive information and overall device security at risk! To safeguard your devices, update to the latest versions: iOS 26, iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, and watchOS 26. Regularly check for updates and apply security patches promptly! You’ve got this! Keep your devices secure with these updates, and stay ahead of the game! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-11-04T07:15Z
Affected products (7)
ProductVersionsFixed in
apple/ipados< 26.126.1
apple/iphone_os< 26.126.1
apple/macos< 14.8.214.8.2
apple/macos≥ 15.0, < 15.7.215.7.2
apple/tvos< 26.126.1
apple/visionos< 26.126.1
apple/watchos< 26.126.1
References (7)
EPSS history
Timeline
  • 04 NOV 01:16Z
    An out-of-bounds read was addressed with improved bounds checking
    cvelistv5