An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/125141 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/125142 | Release Notes Vendor Advisory |
| http://seclists.org/fulldisclosure/2025/Sep/10 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2025/Sep/14 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2025/Sep/52 | Mailing List Third Party Advisory |
| https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.md | Exploit Third Party Advisory |
| https://github.com/cisagov/vulnrichment/issues/201 | Issue Tracking |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43300 | US Government Resource |
Configurations
Configuration 1 (hide)
|
History
26 Nov 2025, 16:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/cisagov/vulnrichment/issues/201 - Issue Tracking |
26 Nov 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 10.0 |
06 Nov 2025, 14:52
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| First Time |
Apple macos
|
|
| CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
Information
Published : 2025-08-21 01:15
Updated : 2025-11-26 16:21
NVD link : CVE-2025-43300
Mitre link : CVE-2025-43300
CVE.ORG link : CVE-2025-43300
JSON object : View
Products Affected
apple
- iphone_os
- macos
- ipados
CWE
CWE-787
Out-of-bounds Write