Zetlyn
GitHubGet started

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and…

cve CVE-2025-43383 1 source, 1 claim · Watch

NVD writes:
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory. the claim
Severity
MEDIUM NVD
CVSS
4.3 NVD
Fixed in
18.7.2, 26.1, 15.7.2 NVD
Vendor
Apple NVD
Product
iOS and iPadOS NVD
CWE
CWE-125 NVD

How far exploitation has got

  1. No public code known
  2. Proof of concept
  3. Proof of concept, verified
  4. A Metasploit module
  5. Exploited in the wild
  6. Used in ransomware campaigns

Timeline

2025-11-04first spoke of it: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.NVD

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

What it is to other things

affectsapple/ipados
NVD
affectsapple/iphone_os
NVD
affectsapple/macos
NVD
affectsapple/tvos
NVD
affectsapple/visionos
NVD
made_byapple
NVD

In words only, so not counted until a person confirms one:

affectsapple/ios_and_ipados
NVD says “Apple · iOS and iPadOS”
Every value, with what each source said and its receipt
PropertySourceSaidMeans here
Automatable
automatable
NVDno
At least one of those steps needs a person.
receipt
Source
NVD
Its words
no
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCno
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS
cvss
NVD4.3
receipt
Source
NVD
Its words
4.3
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since
2026-09-29 09:45 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS vector
cvss_vector
NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
receipt
Source
NVD
Its words
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
CWE
cwe
NVDCWE-125
receipt
Source
NVD
Its words
CWE-125
Read by
field:cve.weaknesses[].description[].value
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCWE-125
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
Exploitation
exploitation
NVDnone
No evidence of exploitation, and no public proof of concept.
receipt
Source
NVD
Its words
none
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCnone
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
Fixed in
fixed_in
NVD18.7.2, 26.1, 15.7.2
receipt
Source
NVD
Its words
18.7.2, 26.1, 15.7.2
Read by
field:cve.affected[].affectedData[].versions[status=affected].lessThan
Said since
2026-10-06 12:29 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 12:29 UTC18.7.2, 26.1, 15.7.2
2026-10-06 11:54 UTC18.7.2, 26.1, 15.7.2, 26.1, 26.1, 26.1
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
Product
product
NVDiOS and iPadOS
receipt
Source
NVD
Its words
iOS and iPadOS
Read by
field:cve.affected[].affectedData[].product
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-09-29 17:49 UTCiOS and iPadOS
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
Severity
severity
NVDMEDIUM
From 4.0 to 6.9.
receipt
Source
NVD
Its words
MEDIUM
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCMEDIUM
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
medium
Status
status
NVDModified
receipt
Source
NVD
Its words
Modified
Read by
field:cve.vulnStatus
Said since
2026-09-29 09:45 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
Technical impact
technical_impact
NVDtotal
The attacker gains full control of the component, or all of its information.
receipt
Source
NVD
Its words
total
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCtotal
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
Vendor
vendor
NVDApple
receipt
Source
NVD
Its words
Apple
Read by
field:cve.affected[].affectedData[].vendor
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-09-29 17:49 UTCApple
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "iOS and iPadOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "18.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "15.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "tvOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "product": "visionOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "26.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "DD6E8540-AC8B-40E0-945A-8D4C465E8471",
                "versionEndExcluding": "15.7.2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "290E0D29-CB5B-45A7-9FE3-FD2030B1D1A4",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "7DFD3616-65CA-4E5C-849C-3C20ACBCB610",
                "versionEndExcluding": "26.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
      },
      {
        "lang": "es",
        "value": "Un problema de acceso fuera de límites se abordó con una comprobación de límites mejorada. Este problema está corregido en iOS 18.7.2 y iPadOS 18.7.2. El procesamiento de un archivo multimedia creado con fines maliciosos puede provocar la terminación inesperada de la aplicación o la corrupción de la memoria del proceso."
      }
    ],
    "id": "CVE-2025-43383",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 1.4,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43383",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-11-15T04:56:22.950185Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-11-04T02:15:45.293",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125632"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125633"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125634"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125635"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125637"
      },
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125638"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}
—
Every claim, by kind

vulnerability

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
zetlyn/cve-nvd · 2025-11-04
automatable no cvss 4.3 cvss_vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L cwe CWE-125 exploitation none fixed_in 18.7.2, 26.1, 15.7.2 product iOS and iPadOS severity MEDIUM status Modified technical_impact total vendor Apple source