CVE-2025-43300
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
Does this matter?
Known to be exploited in the wild (CISA KEV, CISA remediation deadline 11 September 2025). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
- CVSS 3.1
- 10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- EPSS
- 65.16% probability · 99th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Listed 21 August 2025 · due 11 September 2025
- Weakness
- CWE-787
- Affected
- apple/ipados · apple/iphone os · apple/macos
- Source
- product-security@apple.com
EPSS moved from 32.5% on 28 September 2026 to 65.2% on 30 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.
CISA notes
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://support.apple.com/en-us/124925 ; https://support.apple.com/en-us/124926 ; https://support.apple.com/en-us/124927 ; https://support.apple.com/en-us/124928 ; https://support.apple.com/en-us/124929 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43300
References
- https://support.apple.com/en-us/124925Release Notes, Vendor Advisory
- https://support.apple.com/en-us/124926Release Notes, Vendor Advisory
- https://support.apple.com/en-us/124927Release Notes, Vendor Advisory
- https://support.apple.com/en-us/124928Release Notes, Vendor Advisory
- https://support.apple.com/en-us/124929Release Notes, Vendor Advisory
- https://support.apple.com/en-us/125141Release Notes, Vendor Advisory
- https://support.apple.com/en-us/125142Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Sep/10Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/14Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Sep/52Mailing List, Third Party Advisory
- https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.mdExploit, Third Party Advisory
- https://github.com/cisagov/vulnrichment/issues/201Issue Tracking
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43300US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.