PT-2025-44816 · Apple · Ipados+2

Lee Dong Ha · Published 2025-09-15 · Updated 2025-11-04 · CVE-2025-43338

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 iOS versions prior to 17.0 iPadOS versions prior to 17.0

Description An out-of-bounds access issue exists due to insufficient bounds checking. Processing a specially crafted media file could cause an application to terminate unexpectedly or lead to memory corruption.

Recommendations Update macOS to version 14.8.2. Update iOS to version 17.0. Update iPadOS to version 17.0.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-43338

Affected Products

Apple Macos

Ios

Ipados

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-43338 · Security Note
• https://support.apple.com/en-us/125636 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43338 · Vendor Advisory
• https://support.apple.com/en-us/125108 · Vendor Advisory
• https://support.apple.com/en-us/125110 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43338 · Note
• https://support.apple.com/en-us/126350 · Note