PT-2025-39853 · Apple · Ipados+3

Published 2025-09-29 · Updated 2025-11-07 · CVE-2025-43400

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to Tahoe 26.0.1 Apple iOS versions prior to 26.0.1 Apple iPadOS versions prior to 26.0.1 Apple visionOS version 26.0.1 Apple Sonoma versions prior to 14.8.1 Apple Sequoia versions prior to 15.7.1 Apple watchOS version 26.1 Apple tvOS version 26.1 Apple iOS versions prior to 18.7.1 Apple iPadOS versions prior to 18.7.1

Description The issue is an out-of-bounds write flaw within the FontParser component, addressed through improved bounds checking. Processing a maliciously crafted font may lead to unexpected application termination or corruption of process memory. The vulnerability could be exploited remotely, requiring user interaction. Reports indicate this flaw has garnered significant attention, with numerous articles published about it. The root cause is a lack of robust integer overflow checks and insufficient input validation in libFontParser.dylib, which can lead to a heap buffer overflow when parsing a specifically crafted Type 1 font.

Recommendations Update to macOS Tahoe 26.0.1. Update to iOS 26.0.1. Update to iPadOS 26.0.1. Update to visionOS 26.0.1. Update to macOS Sonoma 14.8.1. Update to macOS Sequoia 15.7.1. Update to watchOS 26.1. Update to tvOS 26.1. Update to iOS 18.7.1. Update to iPadOS 18.7.1.

Fix

DoS

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-12527

CVE-2025-43400

Affected Products

Apple Macos

Ios

Ipados

Visionos

References · 44

• https://support.apple.com/en-us/125326 · Vendor Advisory
• https://support.apple.com/en-us/125327 · Vendor Advisory
• https://support.apple.com/en-us/125329 · Vendor Advisory
• https://support.apple.com/en-us/125338 · Vendor Advisory
• https://support.apple.com/en-us/125330 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43400 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43400 · Vendor Advisory
• https://support.apple.com/en-us/125328 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12527 · Security Note
• https://twitter.com/stooee_/status/1976724508682633503 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1973061263962910879 · Twitter Post
• https://twitter.com/stooee_/status/1977086896405688467 · Twitter Post
• https://twitter.com/clearbluejar/status/1972919694203195697 · Twitter Post
• https://twitter.com/Solmeenaa/status/1973115923046474014 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1nuba7c/apple_fixes_critical_font_processing_bug_update · Reddit Post