This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Apple fixes an actively exploited vulnerability
Apple fixes a high-severity and actively exploited [1] vulnerability in its products. Products and their fixed versions: iOS - 18.6.2 [2] iPadOS - 18.6.2 [2], 17.7.10 [3] macOS Ventura - 13.7.8 [4] macOS Sonoma - 14.7.8 [5] macOS Sequoia - 15.6.1 [6]
An unauthenticated remote attacker, due to an out-of-bounds write vulnerability in the Image I/O framework when processing a malicious image file, is able to cause memory corruption [7].
The vulnerability is present in products:
- iOS; <18.6.2
- iPadOS; <18.6.2; <17.7.10
- macOS Ventura; <13.7.8
- macOS Sonoma; <14.7.8
- macOS Sequoia; <15.6.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2025-43300 at cve.org, NVD
- CWE-787: Out-of-bounds Write at cwe.mitre.org
The vulnerability was publicly disclosed 20. 8. 2025.
Links
- [1] https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- [2] https://support.apple.com/en-us/124925
- [3] https://support.apple.com/en-us/124926
- [4] https://support.apple.com/en-us/124929
- [5] https://support.apple.com/en-us/124928
- [6] https://support.apple.com/en-us/124927
- [7] https://nvd.nist.gov/vuln/detail/CVE-2025-43300
By CESNET, z.s.p.o. Michaela Jarošová on 22. 8. 2025.