CVE-2025-43282

A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS…

Medium5.5EPSS 0.16%

Published: 15 Oct 2025
Updated: 2 Apr 2026
Reserved: 16 Apr 2025
Assigned by: apple

Description

A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. An app may be able to cause unexpected system termination.

Scores

CVSS scores of CVE-2025-43282, by who scored it
Scored by	CVSS	Score	Vector
CISA-ADPADP (enrichment)	3.1	Medium5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVDNVD · Modified	3.1	Medium5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 0.16% · top 95% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

An app may be able to cause unexpected system termination
CWE-415 Double Free (opens in a new tab)All about CWE-415 and its CVEs

Affected products

Apple · iOS and iPadOS
- affected < 18.6
Apple · iPadOS
- affected < 17.7.9
Apple · macOS
- affected < 13.7.7
- affected < 14.7.7
- affected < 15.6
Apple · tvOS
- affected < 18.6
Apple · visionOS
- affected < 2.6
Apple · watchOS
- affected < 11.6

References (8)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2025-43282](https://trackcve.app/badge/CVE-2025-43282.svg)](https://trackcve.app/cve/CVE-2025-43282)

Record last updated 2 Apr 2026, 18:26 UTC.