CVE-2025-43370

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process.

CVSS v3 4.0 MEDIUM

4.0^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/125117	Release Notes Vendor Advisory
http://seclists.org/fulldisclosure/2025/Sep/60

Configurations

Configuration 1 (hide)

cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*

History

01 Oct 2026, 16:10

Type	Values Removed	Values Added
Summary		(es) Se abordó un problema de manejo de rutas con validación mejorada. Este problema está corregido en Xcode 26. Procesar un valor de ruta excesivamente grande puede provocar el cierre inesperado de un proceso.

Information

Published : 2025-09-15 23:15

Updated : 2026-10-01 16:10

NVD link : CVE-2025-43370

Mitre link : CVE-2025-43370

CVE.ORG link : CVE-2025-43370

JSON object : View

Products Affected

apple

xcode

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-2025-43370", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43370", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-16T15:01:11.182130Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.5}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "Xcode", "versions": [{"status": "affected", "version": "0", "lessThan": "26", "versionType": "custom"}]}]}], "published": "2025-09-15T23:15:38.667", "references": [{"url": "https://support.apple.com/en-us/125117", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://seclists.org/fulldisclosure/2025/Sep/60", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process."}, {"lang": "es", "value": "Se abord\u00f3 un problema de manejo de rutas con validaci\u00f3n mejorada. Este problema est\u00e1 corregido en Xcode 26. Procesar un valor de ruta excesivamente grande puede provocar el cierre inesperado de un proceso."}], "lastModified": "2026-10-01T16:10:00.257", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37CC7F40-CC3A-4AEB-9260-B621FE64735A", "versionEndExcluding": "26.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}