PT-2025-44858 · Apple · Ios+1

CVE-2025-43422 · Publicado 2025-11-03 · Atualizado 2025-12-01

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1

Description A flaw exists in the Stolen Device Protection function of iOS and iPadOS due to insufficient protection of service data. Successful exploitation could allow an attacker to disable the Stolen Device Protection feature. This issue was addressed by adding additional logic. An attacker requires physical access to the device to exploit this issue.

Recommendations Update to iOS version 26.1 or later. Update to iPadOS version 26.1 or later.

Correção

Information Disclosure

Authentication Bypass Using an Alternate Path or Channel

Enumeração de Fraquezas

CWE-200

CWE-288

Identificadores relacionados

BDU:2025-13965

CVE-2025-43422

Produtos afetados

Ios

Ipados

Referências · 6

• https://bdu.fstec.ru/vul/2025-13965 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-43422 · Nota de Segurança
• https://support.apple.com/en-us/125632 · Aviso do Fabricante
• https://i.redd.it/exmh6wygc5zf1.png · Publicação no Reddit
• https://t.me/cveNotify/144462 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-43422 · Aviso do Fabricante