CVE-2025-43254

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination.

PUBLISHED Reserved 2025-04-16 | Published 2025-07-29 | Updated 2026-04-02 | Assigner apple

Problem types

Processing a maliciously crafted file may lead to unexpected app termination

Product status

References

seclists.org/fulldisclosure/2025/Jul/34

seclists.org/fulldisclosure/2025/Jul/33

seclists.org/fulldisclosure/2025/Jul/32

support.apple.com/en-us/124149

support.apple.com/en-us/124150

support.apple.com/en-us/124151

cve.org (CVE-2025-43254)

nvd.nist.gov (CVE-2025-43254)

Download JSON