PT-2025-37858 · Apple · Visionos+5

Lee Dong Ha · Published 2025-09-15 · Updated 2025-09-16 · CVE-2025-43372

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 26 Apple watchOS versions prior to 26 Apple visionOS versions prior to 26 Apple macOS versions prior to Tahoe 26 Apple iOS versions prior to 26 Apple iPadOS versions prior to 26

Description Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory due to insufficient input validation.

Recommendations Update Apple tvOS to version 26 or later. Update Apple watchOS to version 26 or later. Update Apple visionOS to version 26 or later. Update Apple macOS to version Tahoe 26 or later. Update Apple iOS to version 26 or later. Update Apple iPadOS to version 26 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-11303

CVE-2025-43372

Affected Products

Apple Macos

Ios

Ipados

Tvos

Visionos

Watchos

References · 25

• https://support.apple.com/en-us/125110 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/726079 · Security Note
• https://support.apple.com/en-us/125116 · Vendor Advisory
• https://support.apple.com/en-us/125114 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43372 · Vendor Advisory
• https://support.apple.com/en-us/125115 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11303 · Security Note
• https://support.apple.com/en-us/125108 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43372 · Security Note
• https://t.me/CVEtracker/32584 · Telegram Post
• https://support.apple.com/ru-ru/125114 · Note
• https://t.me/cveNotify/135561 · Telegram Post
• https://support.apple.com/ru-ru/125116 · Note
• https://twitter.com/CVEnew/status/1967819492894867544 · Twitter Post
• https://support.apple.com/en-us/125636 · Note