CVE-2025-43221

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

Affected products

Apple Macos, Ios, Ipados, Macos Sequoia, Tvos, Visionos

Apple Ipados

< 18.6

Apple Iphone Os

< 18.6

Apple Macos

< 15.6

Apple Tvos

< 18.6

Apple Visionos

< 2.6

CVSS 3.1

7.1 HIGH

EPSS

0.2% (12th percentile)

Weakness

CWE-125

NVD status

Modified

Published

2025-07-29