CVE-2025-43482

macOS Input Validation Vulnerability Causing Denial of Service

View on CVE.org
Published Dec 12, 2025 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.

Analysis

AI-generated

Technical impact

The vulnerability is an input validation flaw classified as CWE‑20. An application can supply malformed data that triggers a denial‑of‑service condition, causing the system or applications to crash or become unresponsive. This results in a loss of availability for the affected host.

Affected Systems

Apple macOS releases prior to Sequoia 15.7.3, Sonoma 14.8.3, and Tahoe 26.2 are vulnerable. Upgrading to any of those patched releases eliminates the flaw.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity. An EPSS score of less than 1% suggests a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local or requires a malicious application; based on the description, it is inferred that no remote exploitation path is disclosed.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the system to macOS Sequoia 15.7.3, Sonoma 14.8.3, or Tahoe 26.2 to apply the official fix.
  • If an immediate upgrade is not feasible, restrict execution of untrusted third‑party applications until the patch can be applied.
  • Enable and review system logs for application crashes or abnormal termination that may indicate exploitation attempts.

Generated by OpenCVE AI on April 28, 2026 at 18:33 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title macOS Input Validation Vulnerability Causing Denial of Service
Type Values Removed Values Added
Description The issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to cause a denial-of-service. The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.
Type Values Removed Values Added
Description The issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to cause a denial-of-service. The issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. An app may be able to cause a denial-of-service.
References
Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Type Values Removed Values Added
Weaknesses CWE-20
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Vendors & Products Apple
Apple macos
Apple macos Sequoia
Apple macos Sonoma
Type Values Removed Values Added
Description The issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to cause a denial-of-service.
References
Earlier changes (2)
Weaknesses
  • CWE-20

    Improper Input Validation

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Apr 2, 2026, 6:21 PM
Reserved
Apr 16, 2025, 3:24 PM

View source JSON

Updated
Dec 15, 2025, 12:56 AM

JSON

Status
Modified
Published
Dec 12, 2025, 9:15 PM
Modified
Oct 7, 2026, 8:10 PM

View source JSON

No data.

Updated
Apr 28, 2026, 6:45 PM

JSON