CVE-2025-43300 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.8 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
apple	CNA	---				---
CISA-ADP	ADP	8.8 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 74%

Vendor	Product	Version
apple	ipados	𝑥 < 17.7.10
apple	ipados	18.0 ≤ 𝑥 < 18.6.2
apple	iphone_os	𝑥 < 18.6.2
apple	macos	13.0.0 ≤ 𝑥 < 13.7.8
apple	macos	14.0 ≤ 𝑥 < 14.7.8
apple	macos	15.0 ≤ 𝑥 < 15.6.1

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-787 - Out-of-bounds Write
The software writes data past the end, or before the beginning, of the intended buffer.

Vulnerability Media Exposure

[ENGLISH] Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks
Apple has released security updates to address a security flaw impacting iOS, iPadOS, and macOS that it said has come under active exploitation in the wild. The zero-day out-of-bounds write vulnerability, tracked as CVE-2025-43300 (CVSS score: 8.8), resides in the ImageIO framework that could result in memory corruption when processing a malicious image. "Apple is aware of a report that this
Published: 2025-08-21T10:17:00+05:30
[GERMAN] Apple iOS, iPadOS und macOS: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apple iOS, Apple iPadOS und Apple macOS ausnutzen, um eine Memory-Corruption zu verursachen und möglicherweise beliebigen Code auszuführen oder andere nicht näher spezifizierte Angriffe durchzuführen.
Published: 2025-08-20T22:00:00+00:00

References

https://support.apple.com/en-us/124925

https://support.apple.com/en-us/124926

https://support.apple.com/en-us/124927

https://support.apple.com/en-us/124928

https://support.apple.com/en-us/124929