CVE-2025-43400

Published Sep 29, 2025

Last updated 2 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-43400 is a vulnerability in Apple's font parser that can be triggered by processing a maliciously crafted font file. The vulnerability is an out-of-bounds write issue that can lead to unexpected application termination or corrupt process memory. The vulnerability has been addressed with improved bounds checking in macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, macOS Sequoia 15.7.1, visionOS 26.0.1, iOS 26.0.1 and iPadOS 26.0.1, iOS 18.7.1 and iPadOS 18.7.1. Users are advised to apply the relevant updates promptly.

Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, macOS Sequoia 15.7.1, visionOS 26.0.1, iOS 26.0.1 and iPadOS 26.0.1, iOS 18.7.1 and iPadOS 18.7.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
Source: product-security@apple.com
NVD status: Analyzed
Products: ipados, iphone_os, macos, visionos

Risk scores

CVSS 3.1

Type: Secondary
Base score: 6.3
Impact score: 3.4
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Severity: MEDIUM

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-787

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "79FB7B26-6049-4918-A1B2-60563ABE6D2A",
            "versionEndExcluding": "18.7.1"
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:26.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4173F942-2CF6-447E-A942-948F6EF6CE77"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0EC6C4E6-522F-463A-97B7-BD6F973415AF",
            "versionEndExcluding": "18.7.1"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:26.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E29A276A-7091-42B2-B893-6A5801A0716E"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E2C7BB5-172D-4BBE-90CF-0FCBC72A2193",
            "versionEndExcluding": "14.8.1",
            "versionStartIncluding": "14.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5BF57375-8F19-4CEB-B244-607C4F20AE5A",
            "versionEndExcluding": "15.7.1",
            "versionStartIncluding": "15.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:26.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "551159EE-8311-4A13-802D-85871DAB5E77"
          },
          {
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F1CA1AF0-1A5A-4B3D-A2BA-0C6B98884795",
            "versionEndExcluding": "26.0.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.