SecuriTricks - CVE-2025-43374

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Sequoia 15.5, watchOS 11.5. An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory.

Product(s) Impacted

Vendor	Product	Versions
Apple	Ipados Iphone Os Macos Visionos Watchos	* * * * *

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
o	apple	ipados	/	/	/	/	/	/	/	/
o	apple	ipados	/	/	/	/	/	/	/	/
o	apple	iphone_os	/	/	/	/	/	/	/	/
o	apple	macos	/	/	/	/	/	/	/	/
o	apple	macos	/	/	/	/	/	/	/	/
o	apple	macos	/	/	/	/	/	/	/	/
o	apple	visionos	/	/	/	/	/	/	/	/
o	apple	watchos	/	/	/	/	/	/	/	/

References

https://support.apple.com/en-us/122069

https://support.apple.com/en-us/122070

https://support.apple.com/en-us/122404

https://support.apple.com/en-us/122405

https://support.apple.com/en-us/122716

https://support.apple.com/en-us/122721

https://support.apple.com/en-us/122722

CVSS Score

4.3 / 10

CVSS Data - 3.1

Attack Vector: PHYSICAL
Attack Complexity: LOW
Privileges Required: NONE
Scope: UNCHANGED
Confidentiality Impact: LOW
Integrity Impact: LOW
Availability Impact: LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

View Vector String

Timeline

Published: Nov. 21, 2025, 10:16 p.m.
Last Modified: Nov. 26, 2025, 2:32 p.m.

Status : Analyzed

CVE has had analysis completed and all data associations made.

More info

Source

product-security@apple.com

CVE-2025-43374