CVE-2025-43374

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS…

Medium4.3EPSS 0.21%

Published: 21 Nov 2025
Updated: 2 Apr 2026
Reserved: 16 Apr 2025
Assigned by: apple

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.5, visionOS 2.5, watchOS 11.5. An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory.

Scores

CVSS scores of CVE-2025-43374, by who scored it
Scored by	CVSS	Score	Vector
CISA-ADPADP (enrichment)	3.1	Medium4.3	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
NVDNVD · Modified	3.1	Medium4.3	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS (exploitation in 30 days): 0.21% · top 89% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory
CWE-121 Stack-based Buffer Overflow (opens in a new tab)All about CWE-121 and its CVEs

Affected products

Apple · iOS and iPadOS
- affected < 18.5
Apple · iPadOS
- affected < 17.7.7
Apple · macOS
- affected < 13.7.3
- affected < 14.7.3
- affected < 15.5
Apple · tvOS
- affected < 18.5
Apple · visionOS
- affected < 2.5
Apple · watchOS
- affected < 11.5

References (8)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2025-43374](https://trackcve.app/badge/CVE-2025-43374.svg)](https://trackcve.app/cve/CVE-2025-43374)

Record last updated 2 Apr 2026, 18:18 UTC.