CVE-2025-43400

Published Sep 29, 2025

Last updated a month ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-43400 is a vulnerability in Apple's font parser that can be triggered by processing a maliciously crafted font file. The vulnerability is an out-of-bounds write issue that can lead to unexpected application termination or corrupt process memory. The vulnerability has been addressed with improved bounds checking in macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, macOS Sequoia 15.7.1, visionOS 26.0.1, iOS 26.0.1 and iPadOS 26.0.1, iOS 18.7.1 and iPadOS 18.7.1. Users are advised to apply the relevant updates promptly.

Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.1, tvOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
Source: product-security@apple.com
NVD status: Modified
Products: ipados, iphone_os, macos, visionos

Risk scores

CVSS 3.1

Type: Secondary
Base score: 6.3
Impact score: 3.4
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Severity: MEDIUM

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-787

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "79FB7B26-6049-4918-A1B2-60563ABE6D2A",
            "versionEndExcluding": "18.7.1"
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:26.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4173F942-2CF6-447E-A942-948F6EF6CE77"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0EC6C4E6-522F-463A-97B7-BD6F973415AF",
            "versionEndExcluding": "18.7.1"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:26.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E29A276A-7091-42B2-B893-6A5801A0716E"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E2C7BB5-172D-4BBE-90CF-0FCBC72A2193",
            "versionEndExcluding": "14.8.1",
            "versionStartIncluding": "14.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5BF57375-8F19-4CEB-B244-607C4F20AE5A",
            "versionEndExcluding": "15.7.1",
            "versionStartIncluding": "15.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:26.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "551159EE-8311-4A13-802D-85871DAB5E77"
          },
          {
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F1CA1AF0-1A5A-4B3D-A2BA-0C6B98884795",
            "versionEndExcluding": "26.0.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.