CVE-2025-43299

Опубликовано: 15 сент. 2025

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7. An app may be able to cause a denial-of-service.

Ссылки

https://support.apple.com/en-us/125109
Release Notes
Vendor Advisory
https://support.apple.com/en-us/125111
Release Notes
Vendor Advisory
https://support.apple.com/en-us/125112
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2025/Sep/50
http://seclists.org/fulldisclosure/2025/Sep/53
http://seclists.org/fulldisclosure/2025/Sep/54
http://seclists.org/fulldisclosure/2025/Sep/55

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 18.7 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 18.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.8 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 15.0 (включая) до 15.7 (исключая)

EPSS

Процентиль: 12%

0.00041

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

GHSA-r2pq-fc8r-24vw