CVE-2025-43254

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. Processing a maliciously crafted file may lead to unexpected app termination.

Reserved 2025-04-16 | Published 2025-07-29 | Updated 2025-07-29 | Assigner apple

Problem types

Processing a maliciously crafted file may lead to unexpected app termination

Product status

Any version before 15.6
affected

Any version before 14.7
affected

Any version before 13.7
affected

References

support.apple.com/en-us/124149

support.apple.com/en-us/124150

support.apple.com/en-us/124151

cve.org (CVE-2025-43254)

nvd.nist.gov (CVE-2025-43254)

Download JSON