CVE-2025-43277

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-43277
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8. Processing a maliciously crafted audio file may lead to memory corruption.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/125112 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
History

29 Sep 2025, 22:16

Type Values Removed Values Added
CPE cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/125112 - () https://support.apple.com/en-us/125112 - Release Notes, Vendor Advisory

15 Sep 2025, 23:15

Type Values Removed Values Added
Summary (en) The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, watchOS 11.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted audio file may lead to memory corruption. (en) The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8. Processing a maliciously crafted audio file may lead to memory corruption.
References
  • {'url': 'https://support.apple.com/en-us/124147', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • {'url': 'https://support.apple.com/en-us/124149', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • {'url': 'https://support.apple.com/en-us/124153', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • {'url': 'https://support.apple.com/en-us/124154', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • {'url': 'https://support.apple.com/en-us/124155', 'tags': ['Release Notes', 'Vendor Advisory'], 'source': 'product-security@apple.com'}
  • () https://support.apple.com/en-us/125112 -

31 Jul 2025, 21:25

Type Values Removed Values Added
First Time Apple visionos
Apple ipados
Apple iphone Os
Apple watchos
Apple
Apple tvos
Apple macos
References () https://support.apple.com/en-us/124147 - () https://support.apple.com/en-us/124147 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124149 - () https://support.apple.com/en-us/124149 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124153 - () https://support.apple.com/en-us/124153 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124154 - () https://support.apple.com/en-us/124154 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124155 - () https://support.apple.com/en-us/124155 - Release Notes, Vendor Advisory
CPE cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

31 Jul 2025, 18:15

Type Values Removed Values Added
Summary
  • (es) El problema se solucionó mejorando la gestión de la memoria. Este problema está corregido en iOS 18.6 y iPadOS 18.6, watchOS 11.6, macOS Sequoia 15.6, tvOS 18.6 y visionOS 2.6. Procesar un archivo de audio manipulado con fines maliciosos puede provocar daños en la memoria.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-119

30 Jul 2025, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-30 00:15

Updated : 2025-09-29 22:16

NVD link : CVE-2025-43277

Mitre link : CVE-2025-43277

CVE.ORG link : CVE-2025-43277

JSON object : View

Products Affected

apple

  • macos
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer