The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. Processing a maliciously crafted string may lead to heap corruption.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 15 Sep 2025 22:45:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. Processing a maliciously crafted string may lead to heap corruption.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2025-09-15T22:35:46.825Z

Reserved: 2025-04-16T15:24:37.111Z

Link: CVE-2025-43353

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-09-15T23:15:37.180

Modified: 2025-09-15T23:15:37.180

Link: CVE-2025-43353

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.