CVE-2025-43349

📊 2.8 LOW0.0%🎯 0 exploits
📅 Published Sep 15, 2025
📋 Status: Analyzed

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 26, macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing a maliciously crafted video file may lead to unexpected app termination.

🎯 Affected Products & Systems

7 product configurations affected

Filter by type:
💻
Operating System
Vulnerable
Version: < 18.7
CPE:
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
💻
Operating System
Vulnerable
Version: < 18.7
CPE:
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
💻
Operating System
Vulnerable
Version: ≥ 14.0 ∧ < 14.8
CPE:
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
💻
Operating System
Vulnerable
Version: ≥ 15.0 ∧ < 15.7
CPE:
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
💻
Operating System
Vulnerable
Version: < 26.0
CPE:
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
💻
Operating System
Vulnerable
Version: < 26.0
CPE:
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
💻
Operating System
Vulnerable
Version: < 26.0
CPE:
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
7 productsscroll for more
Metrics
2.8 LOWCVSS v3.1134c704f-9b21-4f2e-91b3-4a467353bcc0
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Attack Vector:
LOCAL
Complexity:
LOW
Privileges:
LOW
User Interaction:
REQUIRED
Confidentiality:
NONE
Integrity:
NONE
Availability:
LOW
Scope:
UNCHANGED

🔍 Technical Details

Analysis Status
Analyzed
CVSS Details
2.8 (LOW)v3.1
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS Details
0.0% (Minimal)3.0th percentile
Last updated: Oct 30, 2025
Exploitation probability within 30 days
Published Date
Sep 15, 2025 (1 month ago)
Last Modified
Sep 17, 2025 (1 month ago)
Security Weaknesses1
References9