CVEvulnerability
CVE-2025-43222
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2025-07-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker may be able to cause unexpected app termination.
Affected configurations
• apple ipados (< 17.7.9)
• apple macos (< 13.7.7)
• apple macos (>= 14.0 < 14.7.7)
• apple macos (>= 15.0 < 15.6)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://support.apple.com/en-us/124148 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/124149 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/124150 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/124151 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jul/31 seclists.org
- http://seclists.org/fulldisclosure/2025/Jul/32 seclists.org
- http://seclists.org/fulldisclosure/2025/Jul/33 seclists.org
- http://seclists.org/fulldisclosure/2025/Jul/34 seclists.org