CVE-2025-43300
KEVCRITICAL 10.0EPSS 32.5%
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
- Affected
- Apple · iOS and iPadOS · iPadOS · macOS
- CVSS v3.1 CNA
- 10.0 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 32.50% chance of exploitation in the next 30 days, 98th percentile
- CISA KEV
- added 2025-08-21
- Published
- 2025-08-21
- Updated
- 2026-04-02
Proof-of-concept exploits (9)
- b1n4r1b01/n-days533★ · 2025-09-28
- DarkNavySecurity/PoC226★ · 2025-08-27
- PwnToday/CVE-2025-433007★ · 2025-09-09
- hunters-sec/CVE-2025-43300119★ · 2025-08-24
- veniversum/cve-2025-433000★ · 2025-09-18
- Dark-life944/CVE-20251★ · 2025-08-24
- ticofookfook/CVE-2025-433004★ · 2025-09-30
- BUSHIGAN/PS4-POC9★ · 2025-10-14
- IsMyPhonePwned/mimic4★ · 2026-02-05
Security advisories
- https://support.apple.com/en-us/124925
- https://support.apple.com/en-us/124926
- https://support.apple.com/en-us/124927
- https://support.apple.com/en-us/124928
- https://support.apple.com/en-us/124929
- https://support.apple.com/en-us/125141
- https://support.apple.com/en-us/125142
- http://seclists.org/fulldisclosure/2025/Sep/10
- http://seclists.org/fulldisclosure/2025/Sep/14
- http://seclists.org/fulldisclosure/2025/Sep/52
- b1n4r1b01/n-days/blob/main/CVE-2025-43300.md
- cisagov/vulnrichment/issues/201