CVE-2025-43297

Type Confusion Causing Denial of Service on macOS Tahoe 26

Published Sep 15, 2025 CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may be able to cause a denial-of-service.

Analysis

Technical impact

The vulnerability is a type confusion bug that can lead to a denial‑of‑service, allowing an application to cause the system to become unresponsive or crash. This weakness arises from improper memory handling corrected in macOS Tahoe 26. The flaw can be triggered when an application deals with incorrectly typed objects, potentially leading to application termination or system instability.

Affected Systems

Apple's macOS operating system is impacted, specifically versions prior to macOS Tahoe 26. Users running earlier releases may be subject to the denial‑of‑service condition when dealing with obfuscated or malformed input from applications.

Risk and Exploitability

The CVSS score of 6.2 indicates moderate severity, and the EPSS score below 1% suggests low likelihood of widespread exploitation at present. The flaw is not in the CISA KEV catalog. Attack vectors are inferred to be local; an app that can execute type confusion may trigger the denial‑of‑service. Protection and timely patching reduce the risk.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 26

Configuration 1 [-]

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

No data.

Vendor	Product	Versions
Apple	Macos	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade to macOS Tahoe 26 or later releases
Ensure that all macOS security updates are installed
Avoid running untrusted applications until the update is applied

Generated by OpenCVE AI on April 28, 2026 at 00:17 UTC.

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-29342	A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may be able to cause a denial-of-service.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.369% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Sep/53
https://support.apple.com/en-us/125110

History

Apr 28, 2026 12:45 AM Title updated View changes

Type	Values Removed	Values Added
Title		Type Confusion Causing Denial of Service on macOS Tahoe 26

Nov 3, 2025 7:30 PM Added references View changes

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Sep/53

Sep 17, 2025 1:45 PM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:o:apple:macos::::::::

Sep 17, 2025 11:00 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple macos
Vendors & Products		Apple Apple macos

Sep 16, 2025 5:15 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-843
Metrics		cvssV3_1 `{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 15, 2025 10:45 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may be able to cause a denial-of-service.
References		https://support.apple.com/en-us/125110