PT-2025-34520 · Apple · Ios/Ipados+2

Published 2025-08-23 · Updated 2025-10-16 · CVE-2025-43280

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.6 iPadOS versions prior to 18.6

Description A flaw exists where forwarding an email could display remote images within the Mail application when operating in Lockdown Mode. The issue was addressed by preventing the loading of remote images. Processing web content may also lead to arbitrary code execution.

Recommendations Update to iOS version 18.6 or later. Update to iPadOS version 18.6 or later.

Fix

Weakness Enumeration

CWE-940

Related Identifiers

CVE-2025-43280

Affected Products

Ios/Ipados

Ipados

Ios

References · 9

• https://osv.dev/vulnerability/CVE-2025-43280 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43280 · Security Note
• https://support.apple.com/en-us/124147 · Vendor Advisory
• https://t.me/CVEtracker/35040 · Telegram Post
• https://twitter.com/CVEnew/status/1978562027577544721 · Twitter Post
• https://t.me/cveNotify/139080 · Telegram Post
• https://twitter.com/xpl0itmE/status/1978715059858596178 · Twitter Post
• https://t.me/cveNotify/139027 · Telegram Post
• https://twitter.com/xpl0itmE/status/1959119434531897742 · Twitter Post