CVE-2025-43205

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 11.4, tvOS 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass ASLR.
References
Link Resource
https://support.apple.com/en-us/122371 Release Notes Vendor Advisory
https://support.apple.com/en-us/122376 Release Notes Vendor Advisory
https://support.apple.com/en-us/122377 Release Notes Vendor Advisory
https://support.apple.com/en-us/122378 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

14 Nov 2025, 15:25

Type Values Removed Values Added
First Time Apple watchos
Apple tvos
Apple iphone Os
Apple visionos
Apple ipados
Apple
CPE cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/122371 - () https://support.apple.com/en-us/122371 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/122376 - () https://support.apple.com/en-us/122376 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/122377 - () https://support.apple.com/en-us/122377 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/122378 - () https://support.apple.com/en-us/122378 - Release Notes, Vendor Advisory

13 Nov 2025, 21:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 6.5
v2 : unknown
v3 : 4.0
CWE CWE-787 CWE-125

12 Nov 2025, 22:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
CWE CWE-787

12 Nov 2025, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-11-12 01:15

Updated : 2025-11-14 15:25


NVD link : CVE-2025-43205

Mitre link : CVE-2025-43205

CVE.ORG link : CVE-2025-43205


JSON object : View

Products Affected

apple

  • watchos
  • iphone_os
  • visionos
  • tvos
  • ipados
CWE
CWE-125

Out-of-bounds Read