nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-43210 CVE-2025-43210
MEDIUM
Apple Multiple Operating Systems Out-of-Bounds Access in Media File Processing
Record summary
CVE-2025-43210 has a selected CVSS score of 6.3 (medium).
Description
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 2, 2026 · Source: CVE List
Affected products and versions
6| Product | Source | Version range | Status |
|---|---|---|---|
iOS and iPadOSBrowse Apple / iOS and iPadOS | CVE List | Before 18.6 | affected |
iPadOSBrowse Apple / iPadOS | CVE List | Before 17.7.9 | affected |
macOSBrowse Apple / macOS | CVE List | Before 13.7.7 | affected |
| Before 14.7.7 | affected | ||
| Before 15.6 | affected | ||
| CVE List | Before 18.6 | affected | |
visionOSBrowse Apple / visionOS | CVE List | Before 2.6 | affected |
watchOSBrowse Apple / watchOS | CVE List | Before 11.6 | affected |
References
9support.apple.com
https://support.apple.com/en-us/124147 support.apple.com
https://support.apple.com/en-us/124148 support.apple.com
https://support.apple.com/en-us/124149 support.apple.com
https://support.apple.com/en-us/124150 support.apple.com
https://support.apple.com/en-us/124151 support.apple.com
https://support.apple.com/en-us/124153 support.apple.com
https://support.apple.com/en-us/124154 support.apple.com
https://support.apple.com/en-us/124155