CVE-2025-43338

published 2025-11-04

CVE-2025-43338: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sonoma…

high 7.1 CVSS 3.1

AV L AC L PR N UI R S U C H I N A H

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sonoma 14.8.4, macOS Tahoe 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
apple	ios_26_and_ipados	—	—
apple	ios_and_ipados	< 26	26
apple	ipados	< 26.0	26.0
apple	iphone_os	< 26.0	26.0
apple	macos	< 14.8.4	14.8.4
apple	macos	< 26	26
apple	macos	< 14.8.2	14.8.2
apple	macos_sonoma	—	—
apple	macos_sonoma	—	—
apple	macos_tahoe	—	—

CWE-79