CVE-2025-43400mediumCWE-787

CVE-2025-43400: fallo de gravedad media en Apple macOS

Publicada el 29 sep 2025 · Actualizada el 02 abr 2026

Seguir esta CVE + Monitorear macOS + Monitorear iOS

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.3epss 7.0%

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Productos afectados

Apple · iOS and iPadOS Apple · macOS Apple · tvOS Apple · visionOS Apple · watchOS

CVEs relacionadas — Apple macOS

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2021-30657MEDIUMCVE-2021-30657EPSS 68.5%KEV CVE-2025-43300CRITICALCVE-2025-43300EPSS 65.2%KEV CVE-2023-41064HIGHCVE-2023-41064EPSS 53.4%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 51.5%KEV CVE-2021-30807HIGHCVE-2021-30807EPSS 28.8%KEV

Referencias

http://seclists.org/fulldisclosure/2025/Sep/73 http://seclists.org/fulldisclosure/2025/Sep/76 http://seclists.org/fulldisclosure/2025/Sep/78 https://support.apple.com/en-us/125326 https://support.apple.com/en-us/125327 https://support.apple.com/en-us/125328 https://support.apple.com/en-us/125329 https://support.apple.com/en-us/125330 https://support.apple.com/en-us/125338 https://support.apple.com/en-us/125637 https://support.apple.com/en-us/125639