PT-2025-25364 · Apple · Imessage+2

Published 2025-02-10 · Updated 2026-02-12 · CVE-2025-43200

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apple watchOS versions 11.3.1 and later Apple macOS Ventura versions 13.7.4 and later Apple iOS versions 15.8.4 and later Apple iPadOS versions 15.8.4 and later Apple iOS versions 16.7.11 and later Apple iPadOS versions 16.7.11 and later Apple iPadOS versions 17.7.5 and later Apple visionOS versions 2.3.1 and later Apple macOS Sequoia versions 15.3.1 and later Apple iOS versions 18.3.1 and later Apple iPadOS versions 18.3.1 and later Apple macOS Sonoma versions 14.7.4 and later

Description A logic issue exists in the processing of maliciously crafted photos or videos shared via an iCloud Link. This flaw allows for zero-click exploitation, meaning no user interaction is required for successful compromise. The vulnerability has been exploited to deploy Paragon’s Graphite spyware, potentially allowing attackers to gain full access to a device, including messages, emails, camera, microphone, and location data. Reports indicate that specific targeted individuals, including journalists, have been affected. The vulnerability was addressed with improved checks.

Recommendations Apple watchOS versions prior to 11.3.1 should be updated. Apple macOS Ventura versions prior to 13.7.4 should be updated. Apple iOS versions prior to 15.8.4 should be updated. Apple iPadOS versions prior to 15.8.4 should be updated. Apple iOS versions prior to 16.7.11 should be updated. Apple iPadOS versions prior to 16.7.11 should be updated. Apple iPadOS versions prior to 17.7.5 should be updated. Apple visionOS versions prior to 2.3.1 should be updated. Apple macOS Sequoia versions prior to 15.3.1 should be updated. Apple iOS versions prior to 18.3.1 should be updated. Apple iPadOS versions prior to 18.3.1 should be updated. Apple macOS Sonoma versions prior to 14.7.4 should be updated.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-07428

CVE-2025-43200

Affected Products

Apple Macos

Imessage

Ios

References · 98

• https://support.apple.com/en-us/122345 · Vendor Advisory
• https://support.apple.com/en-us/122346 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43200 · Security Note
• https://bdu.fstec.ru/vul/2025-07428 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43200 · Vendor Advisory
• https://twitter.com/minacrissDev_/status/1945185215585919318 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1934796498925179218 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43200 · Note
• https://twitter.com/the_yellow_fall/status/1933442825460518970 · Twitter Post
• https://twitter.com/jaybird1291/status/1946320572452835463 · Twitter Post
• https://support.apple.com/en-us/122903 · Security Note, Vendor Advisory
• https://twitter.com/smart_c_intel/status/1935625580415770955 · Twitter Post
• https://t.me/true_secator/7128 · Telegram Post
• https://twitter.com/attritionorg/status/1935030434431111673 · Twitter Post
• https://twitter.com/grok/status/1998137473868910925 · Twitter Post