CVE-2025-43539CWE-119CWE-787

CVE-2025-43539

High · published December 13, 2025

CVSS v3.1
8.8
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚡ A single mishandled file can lead to memory corruption! This high-severity flaw in iOS and macOS could let an attacker destabilize your device. 🔥 Think of it like a restaurant serving a dish that was accidentally prepared with the wrong ingredients — one bad component can spoil the entire meal! Here, a file processed incorrectly can cause a chain reaction that disrupts memory management. If exploited, this vulnerability could lead to crashing apps or even full system instability, leaving your device vulnerable to other attacks or failures. While no known exploits are reported yet, the potential for chaos is all too real and could disrupt your daily activities.

Put simply

Think of it like a restaurant serving a dish that was accidentally prepared with the wrong ingredients — one bad component can spoil the entire meal! Here, a file processed incorrectly can cause a chain reaction that disrupts memory management. This memory corruption issue arises from insufficient bounds checks when processing files, potentially allowing attackers to manipulate memory addresses and cause unstable behavior.

What to do

If exploited, this vulnerability could lead to crashing apps or even full system instability, leaving your device vulnerable to other attacks or failures. While no known exploits are reported yet, the potential for chaos is all too real and could disrupt your daily activities. To protect your devices, update to the latest versions: iOS/iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and so on. Regularly check for updates to ensure your systems are running the most secure versions. You've got this! Follow these steps to secure your devices and keep them running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.06155 · 93.5th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-787 · Out-of-bounds Write
Published
2025-12-13T02:15Z
Affected products (2)
ProductVersionsFixed in
apple/macos< 14.8.314.8.3
apple/macos≥ 15.0, < 15.7.315.7.3
References (8)
EPSS history
Timeline
  • 12 DEC 20:56Z
    The issue was addressed with improved bounds checks
    cvelistv5