CVE-2025-43277

EPSS 0.04%
Veröffentlicht 29.07.2025 23:29:29
Zuletzt bearbeitet 02.04.2026 19:20:18
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.8, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted audio file may lead to memory corruption.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 14

NVD 1 VulnDex Vulnerability Enrichment 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ macOS Version < 14.8

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.12

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://support.apple.com/en-us/124147

https://support.apple.com/en-us/124149

https://support.apple.com/en-us/124153

https://support.apple.com/en-us/124154

https://support.apple.com/en-us/124155

https://support.apple.com/en-us/125112

Vendor Advisory

Release Notes

http://seclists.org/fulldisclosure/2025/Sep/55

http://seclists.org/fulldisclosure/2025/Jul/30

http://seclists.org/fulldisclosure/2025/Jul/32

http://seclists.org/fulldisclosure/2025/Jul/35