CVE-2025-43338

CVSS 7.1 HIGHEPSS 0.2%CWE-79

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.1EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

04 nov 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sonoma 14.8.4, macOS Tahoe 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Produtos afetados

Apple · iOS and iPadOS Apple · macOS

Referências

https://support.apple.com/en-us/125108 https://support.apple.com/en-us/125110 https://support.apple.com/en-us/125636 https://support.apple.com/en-us/126350