CVE-2025-43386

An out-of-bounds access issue exists in the Model I/O framework, which was addressed with improved bounds checking. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory . This vulnerability affects several Apple platforms and is fixed in iOS...

CVE-2025-43504

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service...

CVE-2025-43504

A buffer overflow vulnerability exists in the LLDB debugserver component used by Xcode during iOS device debugging. A remote user can trigger this by sending an unauthenticated qSpeedTest:response_size:; packet to the debugserver via a GDB-remote session. The issue stems from an insufficient boun...

CVE-2025-43504

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service...

CVE-2025-43338

An out-of-bounds access issue in the ImageIO component of iOS 26 , iPadOS 26 , and macOS Sonoma 14.8.2 (also addressed in macOS Sonoma 14.8.4 and macOS Tahoe 26) was resolved with improved bounds checking. Processing a maliciously crafted media file could result in unexpected app termination or c...

CVE-2025-43361

Several Apple products are susceptible to an out-of-bounds read vulnerability due to insufficient boundary checks . A malicious application could exploit this flaw to read kernel memory . Affected software includes iOS prior to version 26, iPadOS prior to version 26, tvOS prior to version 26, wat...

CVE-2025-43361

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A malicious app may be able to read kernel memory...

CVE-2025-43377

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service...

CVE-2025-43377

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service...

CVE-2025-43377

An out-of-bounds read vulnerability was identified in the Model I/O framework. This issue was addressed by implementing improved bounds checking. If exploited, an app may be able to cause a denial-of-service (DoS). The vulnerability is fixed in iOS 18.7.2 , iPadOS 18.7.2 , macOS Sequoia 15.7.2 , ...

CVE-2025-43383

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app...

CVE-2025-43383

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app...

CVE-2025-43385

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing a maliciously crafted media file may lead to unexpected app...

CVE-2025-43385

Apple addressed an out-of-bounds access issue in its operating systems by implementing improved bounds checking. The vulnerability is present in the Model I/O component, where processing a maliciously crafted media file could result in unexpected app termination or corrupt process memory . This i...

CVE-2025-43429

A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43429

A buffer overflow exists in WebKit (including webkit2gtk3 ) due to insufficient bounds checking. Processing maliciously crafted web content can lead to an unexpected process crash . This issue is addressed in Safari 26.1 , iOS 18.7.2 (and iOS 26.1 ), iPadOS 18.7.2 (and iPadOS 26.1 ), macOS Tahoe ...

CVE-2025-43429

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43429

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

MediaTek Chipsets Security Vulnerabilities

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could lead to remote elevation of privilege...

MediaTek Chipsets Security Vulnerabilities

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could result in out-of-bounds writes and could lead to local elevation of privilege if a malicious attacker ha...