CVE-2025-43205

Опубликовано: 12 нояб. 2025

Источник: nvd

CVSS3: 4

EPSS Низкий

Описание

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 11.4, tvOS 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass ASLR.

Ссылки

https://support.apple.com/en-us/122371
Release Notes
Vendor Advisory
https://support.apple.com/en-us/122376
Release Notes
Vendor Advisory
https://support.apple.com/en-us/122377
Release Notes
Vendor Advisory
https://support.apple.com/en-us/122378
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 18.4 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 18.4 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 18.4 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 2.4 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 11.4 (исключая)

EPSS

Процентиль: 1%

0.0001

Низкий

4 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

GHSA-h2g7-2683-wf59

CVSS3: 6.5

github

3 месяца назад

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 11.4, tvOS 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass ASLR.

EPSS

Процентиль: 1%

0.0001

Низкий

4 Medium

CVSS3

Дефекты

CWE-125