7.1

CVE-2025-43520

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Tahoe 26.1, visionOS 26.1, tvOS 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, iOS 26.1 and iPadOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 18.7.2
Apple ≫ iPadOS Version >= 26.0 < 26.1
Apple ≫ iPhone OS Version < 18.7.2
Apple ≫ iPhone OS Version >= 26.0 < 26.1
Apple ≫ macOS Version < 14.8.2
Apple ≫ macOS Version >= 15.0 < 15.7.2
Apple ≫ macOS Version >= 26.0 < 26.1
Apple ≫ tvOS Version < 26.1
Apple ≫ visionOS Version < 26.1
Apple ≫ watchOS Version < 26.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.028
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://support.apple.com/en-us/125636
Vendor Advisory
Release Notes
https://support.apple.com/en-us/125635
Vendor Advisory
Release Notes
https://support.apple.com/en-us/125632
Vendor Advisory
Release Notes
https://support.apple.com/en-us/125637
Vendor Advisory
Release Notes
https://support.apple.com/en-us/125638
Vendor Advisory
Release Notes
https://support.apple.com/en-us/125639
Vendor Advisory
Release Notes
https://support.apple.com/en-us/125633
Vendor Advisory
Release Notes
https://support.apple.com/en-us/125634
Vendor Advisory
Release Notes