CVE-2025-43234
CRITICALiPadOS < 18.6 - Memory Corruption via Malicious Texture Processing
Title source: llmDescription
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted texture may lead to unexpected app termination.
References (9)
Core 9
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/124147
Release Notes, Vendor Advisory
https://support.apple.com/en-us/124149
Release Notes, Vendor Advisory
https://support.apple.com/en-us/124153
Release Notes, Vendor Advisory
https://support.apple.com/en-us/124154
Release Notes, Vendor Advisory
https://support.apple.com/en-us/124155
Mailing List
http://seclists.org/fulldisclosure/2025/Jul/30
Mailing List
http://seclists.org/fulldisclosure/2025/Jul/32
Mailing List
http://seclists.org/fulldisclosure/2025/Jul/35
Mailing List
http://seclists.org/fulldisclosure/2025/Jul/37
Scores
CVSS v3
9.8
EPSS
0.0077
EPSS Percentile
73.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-20
Status
published
Products (11)
Apple/iOS and iPadOS
< 18.6
apple/ipados
< 18.6
apple/iphone_os
< 18.6
apple/macos
< 15.6
Apple/macOS
< 15.6
apple/tvos
< 18.6
Apple/tvOS
< 18.6
apple/visionos
< 2.6
Apple/visionOS
< 2.6
apple/watchos
< 11.6
... and 1 more
Published
Jul 30, 2025
Tracked Since
Feb 18, 2026