PT-2025-31352 · Apple · Apple Macos

Published 2025-07-29 · Updated 2026-04-03 · CVE-2025-43264

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple macOS (affected versions not specified)

Description The USD importMeshJointWeights and USD importMeshes functionalities in Apple macOS contain heap-based buffer overflow vulnerabilities. These issues can lead to remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2025-43264

ZDI-25-682

ZDI-25-683

Affected Products

Apple Macos

References · 9

• https://zerodayinitiative.com/advisories/ZDI-25-683 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-682 · Security Note
• https://support.apple.com/en-us/124149 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43264 · Security Note
• https://twitter.com/TheHackerWire/status/2039930830638948861 · Twitter Post
• https://twitter.com/CVEnew/status/2040128802282524942 · Twitter Post
• https://twitter.com/infoflowcloud/status/2040129998619603175 · Twitter Post
• https://twitter.com/CveFindCom/status/2039828387905028322 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43264 · Note