{"id":"CVE-2025-43520","kind":"vulnerability","aliases":["CVE-2025-43520"],"related":[],"title":"A memory corruption issue was addressed with improved memory handling","description":"Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"Apple's watchOS, iOS, iPadOS, macOS, visionOS and tvOS have a classic buffer overflow that lets a malicious app crash the system or write kernel memory. CISA reports active exploitation in the wild.","severity":"medium","cvss":5.5,"epss":null,"exploited":true,"exploited_at":"2026-03-20T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["18.7.2"],"affected":"< 18.7.2","ecosystem":"vendor"},{"name":"apple ipados","fixed":[],"affected":"= 26.0","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["18.7.2"],"affected":"< 18.7.2","ecosystem":"vendor"},{"name":"apple iphone os","fixed":[],"affected":"= 26.0","ecosystem":"vendor"},{"name":"apple macos","fixed":["14.8.2"],"affected":">= 14.0, < 14.8.2","ecosystem":"vendor"},{"name":"apple macos","fixed":["15.7.2"],"affected":">= 15.0, < 15.7.2","ecosystem":"vendor"},{"name":"apple macos","fixed":[],"affected":"= 26.0","ecosystem":"vendor"},{"name":"apple tvos","fixed":["26.1"],"affected":"< 26.1","ecosystem":"vendor"},{"name":"apple visionos","fixed":["26.1"],"affected":"< 26.1","ecosystem":"vendor"},{"name":"apple watchos","fixed":["26.1"],"affected":"< 26.1","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","ios","ipados","macos","tvos","visionos","watchos"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Update Apple devices to the latest OS release per Apple's security notes; CISA points to vendor mitigations, and the exact fixed versions are not in the sources.","status":"open","published_at":"2025-12-12T21:15:56+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:39:02+00:00","updated_at":"2026-10-23T23:44:51+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-23T20:39:02Z","model":"claude-haiku-5-5","output":{"fix":"Update Apple devices to the latest OS release per Apple's security notes; CISA points to vendor mitigations, and the exact fixed versions are not in the sources.","reach":"local","summary":"Apple's watchOS, iOS, iPadOS, macOS, visionOS and tvOS have a classic buffer overflow that lets a malicious app crash the system or write kernel memory. CISA reports active exploitation in the wild.","category":"infrastructure","who_cares":["ios","macos","ipados","watchos","tvos","visionos"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A malicious app could crash the system or write kernel memory, gaining deep control of the device.","analyst_note":"Find Apple's security content page for CVE-2025-43520 to get affected and fixed OS versions and any mitigation steps.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000437,"input_tokens":2558,"output_tokens":363,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':124C '-2025':12A,15A '-43520':13A,16A '22':123C 'action':114C 'activ':78B 'address':6A 'allow':99C 'app':68B 'appl':50B,83C 'apple':17A,20A,22A,24A,27A,30A,32A,34A,36A,38A,40A 'appli':115C 'applic':102C,121C 'bod':122C 'buffer':62B,94C 'caus':104C 'cisa':76B,112C 'classic':61B,93C 'cloud':127C 'contain':91C 'corrupt':3A 'could':98C 'crash':69B 'cve':11A,14A 'discontinu':130C 'exploit':42B,79B 'follow':120C 'guidanc':125C 'handl':10A 'improv':8A 'infrastructur':43B 'instruct':119C 'io':44B,53B,85C 'ipado':45B,54B,86C 'ipados':21A,23A 'iphone':25A,28A 'issu':4A 'kernel':74B,110C 'let':65B 'maco':46B,55B,87C 'macos':31A,33A,35A 'malici':67B,101C 'memori':2A,9A,75B,111C 'mitig':116C,136C 'multiple':18A 'os':26A,29A 'overflow':63B,95C 'per':117C 'product':134C 'products':19A 'report':77B 'requir':113C 'servic':128C 'system':71B,106C 'termin':107C 'tvos':37A,47B,58B,90C 'unavail':138C 'unexpect':105C 'use':131C 'vendor':118C 'visiono':48B,56B,88C 'visionos':39A 'vulner':96C 'watcho':49B,52B,84C 'watchos':41A 'wild':82B 'write':73B,109C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2025-12-12T21:15:56+00:00","kev":{"dateAdded":"2026-03-20","dueDate":"2026-04-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2025-43520","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43520","severity":null,"published_at":"2026-03-20T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:21+00:00","note":null},{"source":"nvd","external_id":"CVE-2025-43520","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43520","severity":null,"published_at":"2025-12-12T21:15:56+00:00","modified_at":"2026-10-07T11:10:00+00:00","first_seen_at":"2026-10-23T23:44:51+00:00","fetched_at":"2026-10-23T23:44:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}