CVE-2025-43349
📊 2.8 LOW⚡ 0.0%🎯 0 exploits
📅 Published Sep 15, 2025
📋 Status: Analyzed
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 26, macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing a maliciously crafted video file may lead to unexpected app termination.
CVSS v3.1 • 134c704f-9b21-4f2e-91b3-4a467353bcc0
🎯 Affected Products & Systems
7 product configurations affected
Filter by type:
| Type | Vendor | Product | Version Range | Status | CPE String | 
|---|---|---|---|---|---|
| 💻OS | apple | ipados | < 18.7 | Vulnerable | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* | 
| 💻OS | apple | iphone os | < 18.7 | Vulnerable | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | 
| 💻OS | apple | macos | ≥ 14.0 ∧ < 14.8 | Vulnerable | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | 
| 💻OS | apple | macos | ≥ 15.0 ∧ < 15.7 | Vulnerable | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | 
| 💻OS | apple | tvos | < 26.0 | Vulnerable | cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* | 
| 💻OS | apple | visionos | < 26.0 | Vulnerable | cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* | 
| 💻OS | apple | watchos | < 26.0 | Vulnerable | cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* | 
Version: < 18.7
CPE:
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Version: ≥ 14.0 ∧ < 14.8
CPE:
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Version: ≥ 15.0 ∧ < 15.7
CPE:
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Version: < 26.0
CPE:
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
7 products•scroll for more
Metrics
2.8 LOWCVSS v3.1134c704f-9b21-4f2e-91b3-4a467353bcc0
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Attack Vector:
LOCAL
Complexity:
LOW
Privileges:
LOW
User Interaction:
REQUIRED
Confidentiality:
NONE
Integrity:
NONE
Availability:
LOW
Scope:
UNCHANGED
🔍 Technical Details
Analysis Status
AnalyzedCVSS Details
2.8 (LOW)v3.1
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS Details
0.0% (Minimal)3.0th percentile
Last updated: Oct 30, 2025
Exploitation probability within 30 days
Published Date
Sep 15, 2025 (1 month ago)
Last Modified
Sep 17, 2025 (1 month ago)
Security Weaknesses1
CWE-787
References9
NVDgeneralgeneral+6