CVE-2025-43353

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. Processing a maliciously crafted string may lead to heap corruption.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2025-09-15

Last modified

2026-04-02

Weaknesses

CWE-787

Affected products

• Macos (Apple)

References

• https://support.apple.com/en-us/125110
• https://support.apple.com/en-us/125111
• https://support.apple.com/en-us/125112
• http://seclists.org/fulldisclosure/2025/Sep/53
• http://seclists.org/fulldisclosure/2025/Sep/54
• http://seclists.org/fulldisclosure/2025/Sep/55