CVE-2025-43277

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-43277
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8. Processing a maliciously crafted audio file may lead to memory corruption.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/125112 Release Notes Vendor Advisory
http://seclists.org/fulldisclosure/2025/Jul/30
http://seclists.org/fulldisclosure/2025/Jul/32
http://seclists.org/fulldisclosure/2025/Jul/35
http://seclists.org/fulldisclosure/2025/Jul/37
http://seclists.org/fulldisclosure/2025/Sep/55
Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
History

03 Nov 2025, 20:18

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2025/Jul/30 -
  • () http://seclists.org/fulldisclosure/2025/Jul/32 -
  • () http://seclists.org/fulldisclosure/2025/Jul/35 -
  • () http://seclists.org/fulldisclosure/2025/Jul/37 -

03 Nov 2025, 19:15

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2025/Sep/55 -

29 Sep 2025, 22:16

Type Values Removed Values Added
CPE cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/125112 - () https://support.apple.com/en-us/125112 - Release Notes, Vendor Advisory

15 Sep 2025, 23:15

Type Values Removed Values Added
References
  • {'url': 'https://support.apple.com/en-us/124147', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • {'url': 'https://support.apple.com/en-us/124149', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • {'url': 'https://support.apple.com/en-us/124153', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • {'url': 'https://support.apple.com/en-us/124154', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • {'url': 'https://support.apple.com/en-us/124155', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • () https://support.apple.com/en-us/125112 -
Summary (en) The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, watchOS 11.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted audio file may lead to memory corruption. (en) The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8. Processing a maliciously crafted audio file may lead to memory corruption.

31 Jul 2025, 21:25

Type Values Removed Values Added
First Time Apple watchos
Apple
Apple tvos
Apple ipados
Apple macos
Apple visionos
Apple iphone Os
CPE cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/124147 - () https://support.apple.com/en-us/124147 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124149 - () https://support.apple.com/en-us/124149 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124153 - () https://support.apple.com/en-us/124153 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124154 - () https://support.apple.com/en-us/124154 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124155 - () https://support.apple.com/en-us/124155 - Release Notes, Vendor Advisory

31 Jul 2025, 18:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-119
Summary
  • (es) El problema se solucionó mejorando la gestión de la memoria. Este problema está corregido en iOS 18.6 y iPadOS 18.6, watchOS 11.6, macOS Sequoia 15.6, tvOS 18.6 y visionOS 2.6. Procesar un archivo de audio manipulado con fines maliciosos puede provocar daños en la memoria.

30 Jul 2025, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-30 00:15

Updated : 2025-11-03 20:18

NVD link : CVE-2025-43277

Mitre link : CVE-2025-43277

CVE.ORG link : CVE-2025-43277

JSON object : View

Products Affected

apple

  • macos
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer