CVE-2025-43400

{"id": "CVE-2025-43400", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43400", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-29T18:49:18.565831Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "0", "lessThan": "18.7.1", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "26.0.1", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"status": "affected", "version": "0", "lessThan": "14.8.1", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "15.7.1", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "26.0.1", "versionType": "custom"}]}, {"vendor": "Apple", "product": "tvOS", "versions": [{"status": "affected", "version": "0", "lessThan": "26.1", "versionType": "custom"}]}, {"vendor": "Apple", "product": "visionOS", "versions": [{"status": "affected", "version": "0", "lessThan": "26.0.1", "versionType": "custom"}]}, {"vendor": "Apple", "product": "watchOS", "versions": [{"status": "affected", "version": "0", "lessThan": "26.1", "versionType": "custom"}]}]}], "published": "2025-09-29T18:15:31.620", "references": [{"url": "https://support.apple.com/en-us/125326", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125327", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125328", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125329", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125330", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125338", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125637", "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125639", "source": "product-security@apple.com"}, {"url": "http://seclists.org/fulldisclosure/2025/Sep/73", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2025/Sep/76", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2025/Sep/78", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory."}], "lastModified": "2026-06-17T09:23:55.557", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79FB7B26-6049-4918-A1B2-60563ABE6D2A", "versionEndExcluding": "18.7.1"}, {"criteria": "cpe:2.3:o:apple:ipados:26.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4173F942-2CF6-447E-A942-948F6EF6CE77"}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EC6C4E6-522F-463A-97B7-BD6F973415AF", "versionEndExcluding": "18.7.1"}, {"criteria": "cpe:2.3:o:apple:iphone_os:26.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E29A276A-7091-42B2-B893-6A5801A0716E"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E2C7BB5-172D-4BBE-90CF-0FCBC72A2193", "versionEndExcluding": "14.8.1", "versionStartIncluding": "14.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BF57375-8F19-4CEB-B244-607C4F20AE5A", "versionEndExcluding": "15.7.1", "versionStartIncluding": "15.0"}, {"criteria": "cpe:2.3:o:apple:macos:26.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "551159EE-8311-4A13-802D-85871DAB5E77"}, {"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1CA1AF0-1A5A-4B3D-A2BA-0C6B98884795", "versionEndExcluding": "26.0.1"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}