PT-2025-37843 · Apple · Visionos+8

Zlluny · Published 2025-09-15 · Updated 2025-09-25 · CVE-2025-43349

Positive Technologies (AI Summary)

CVSS v3.1

2.8

Low

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions 14.8 macOS Sequoia versions 15.7 macOS Tahoe versions 26 tvOS versions 26 iOS versions 18.7 and 26 iPadOS versions 18.7 and 26 visionOS versions 26 watchOS versions 26

Description An out-of-bounds write issue was addressed with improved input validation. Processing a maliciously crafted video file may lead to unexpected app termination.

Recommendations Update to macOS Sonoma version 14.8. Update to macOS Sequoia version 15.7. Update to macOS Tahoe version 26. Update to tvOS version 26. Update to iOS version 18.7 or 26. Update to iPadOS version 18.7 or 26. Update to visionOS version 26. Update to watchOS version 26.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-11312

CVE-2025-43349

ZDI-25-899

Affected Products

Apple Macos

Ios

Ipados

Macos Sequoia

Macos Sonoma

Macos Tahoe

Tvos

Visionos

Watchos

References · 34

• https://zerodayinitiative.com/advisories/ZDI-25-899 · Security Note
• https://support.apple.com/en-us/125116 · Vendor Advisory
• https://support.apple.com/en-us/125114 · Vendor Advisory
• https://support.apple.com/en-us/125115 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11312 · Security Note
• https://support.apple.com/en-us/125111 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43349 · Vendor Advisory
• https://support.apple.com/en-us/125110 · Vendor Advisory
• https://support.apple.com/en-us/125112 · Vendor Advisory
• https://support.apple.com/en-us/125109 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43349 · Security Note
• https://support.apple.com/en-us/125108 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1967835144665936033 · Twitter Post
• https://t.me/CVEtracker/32569 · Telegram Post
• https://support.apple.com/ru-ru/125114 · Note