CVE-2025-43474CWE-125

CVE-2025-43474

High · published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

⚡ A sneaky out-of-bounds read could take down your system! This vulnerability could let an app read sensitive memory or even crash your macOS. 🔥 Think of it like a waiter accidentally serving you a dish from the wrong table, revealing the secret ingredients of someone else's meal. In this case, the app can peek into the kernel’s memory, which is like getting a glimpse behind the restaurant's kitchen doors when they shouldn’t! An attacker could potentially cause unexpected system termination or access sensitive kernel information, leading to data leaks or crashes. This could disrupt your workflow and expose critical data, which is absolutely devastating!

Put simply

Think of it like a waiter accidentally serving you a dish from the wrong table, revealing the secret ingredients of someone else's meal. In this case, the app can peek into the kernel’s memory, which is like getting a glimpse behind the restaurant's kitchen doors when they shouldn’t! This out-of-bounds read flaw occurs due to inadequate input validation, allowing an application to access memory it shouldn't. This could lead to crashes or unauthorized reading of kernel memory, making it a serious concern.

What to do

An attacker could potentially cause unexpected system termination or access sensitive kernel information, leading to data leaks or crashes. This could disrupt your workflow and expose critical data, which is absolutely devastating! Update your macOS to Sequoia 15.7.2, Sonoma 14.8.2, or Tahoe 26.1 to patch this vulnerability immediately. It's essential to ensure input validation is robust to prevent such issues from lurking in the future. You’ve got this! Patch your systems, and you’ll have this vulnerability locked down in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00197 · 8.9th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-11-04T07:15Z
Affected products (2)
ProductVersionsFixed in
apple/macos< 14.8.214.8.2
apple/macos≥ 15.0, < 15.7.215.7.2
References (3)
EPSS history
Timeline
  • 04 NOV 01:16Z
    An out-of-bounds read was addressed with improved input validation
    cvelistv5