CVE Watch—

CVE-2025-43300

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CVSS

—

Sem CVSS

EPSS

65.2%

p99

KEV

SIM

21 de ago. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

32.0%EPSS · 30 dias65.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Apple / iOS, iPadOS, and macOS

Vulnerabilidade

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Adicionado ao KEV

21 de ago. de 2025

Corrigir até

11 de set. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://support.apple.com/en-us/124925 ; https://support.apple.com/en-us/124926 ; https://support.apple.com/en-us/124927 ; https://support.apple.com/en-us/124928 ; https://support.apple.com/en-us/124929 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43300

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2023-41064—

99.0%

KEV—80Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability—CVE-2023-28206—

97.8%

KEV—79Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability—CVE-2022-22620—

97.0%

KEV—79Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability—CVE-2021-30858—

96.4%

KEV—79Apple iOS, iPadOS, macOS Use-After-Free Vulnerability—CVE-2021-1870—

94.6%

KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—CVE-2021-1871—

94.2%

KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—