CVE-2025-43254

Out-of-Bounds Read Causing Application Crash in macOS

View on CVE.org
Published Jul 29, 2025 CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination.

Analysis

AI-generated

Technical impact

A vulnerability in macOS allows an attacker to trigger an out‑of‑bounds read by supplying a specially crafted file. The flaw is in data validation when processing the file, leading to unexpected application termination. The attacker cannot gain code execution or elevate privileges, but the application crash can disrupt services or user tasks.

Affected Systems

Apple’s macOS operating system is impacted. The issue has been fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, so any earlier macOS releases remain vulnerable.

Risk and Exploitability

The CVSS score of 7.1 indicates a high severity, but the EPSS score of less than 1% shows that it is unlikely to be exploited currently. The vulnerability is not listed in the CISA KEV catalog, suggesting no known active exploitation. Attackers would need to supply a malicious file to an application that processes the vulnerable file type, so the attack vector is local or remote file upload, depending on the target application's capabilities.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade macOS to at least Sequoia 15.6, Sonoma 14.7.7, or Ventura 13.7.7, which contain the input‑validation fix
  • Configure the system to download and install automatic updates so that future patches are applied promptly
  • Restrict or monitor the use of the vulnerable file types in the environment and block unknown or forged files from being processed by applications

Generated by OpenCVE AI on April 28, 2026 at 01:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-23057 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. Processing a maliciously crafted file may lead to unexpected app termination.
History
Type Values Removed Values Added
Title Out-of-Bounds Read Causing Application Crash in macOS
Type Values Removed Values Added
Description An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. Processing a maliciously crafted file may lead to unexpected app termination. An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination.
Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Weaknesses CWE-125
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'}
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Apple macos Ventura
Vendors & Products Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Apple macos Ventura
Type Values Removed Values Added
Description An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination. An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. Processing a maliciously crafted file may lead to unexpected app termination.
Type Values Removed Values Added
Description An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Processing a maliciously crafted file may lead to unexpected app termination.
References
Earlier changes (4)
Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Apr 2, 2026, 6:08 PM
Reserved
Apr 16, 2025, 3:24 PM

View source JSON

Updated
Nov 3, 2025, 8:03 PM

JSON

Status
Modified
Published
Jul 30, 2025, 12:15 AM
Modified
Jun 17, 2026, 9:23 AM

View source JSON

No data.

Updated
Apr 28, 2026, 1:15 AM

JSON