PT-2025-44858 · Apple · Ios+1

Published 2025-11-03 · Updated 2025-12-01 · CVE-2025-43422

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1

Description A flaw exists in the Stolen Device Protection function of iOS and iPadOS due to insufficient protection of service data. Successful exploitation could allow an attacker to disable the Stolen Device Protection feature. This issue was addressed by adding additional logic. An attacker requires physical access to the device to exploit this issue.

Recommendations Update to iOS version 26.1 or later. Update to iPadOS version 26.1 or later.

Fix

Information Disclosure

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-200

CWE-288

Related Identifiers

BDU:2025-13965

CVE-2025-43422

Affected Products

Ios

Ipados

References · 6

• https://bdu.fstec.ru/vul/2025-13965 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-43422 · Security Note
• https://support.apple.com/en-us/125632 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43422 · Vendor Advisory
• https://i.redd.it/exmh6wygc5zf1.png · Reddit Post
• https://t.me/cveNotify/144462 · Telegram Post