CVE-2025-43300

highpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.320 · 98 %ileexploit · PoCDEEUNLRUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 5 exploits · PoC

Likely / severe?

32.0% (98th) EPSS

CVSS 8.8 · high

Is it mine?

48 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

added 2025-08-21remediate by 2025-09-11

required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-23

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.8–10

v3.18.8highAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondaryexploitability 3.9 · impact 6

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787USCWE-787USCWE-787US

exploits (5)

Public proof-of-concept and weaponised exploit code.

Dark-life944/CVE-2025This is POC for IOS 0click CVE-2025-43300PoC · poc_in_github
PwnToday/CVE-2025-43300CVE-2025-43300: iOS/macOS DNG Image Processing Memory CorruptionPoC · poc_in_github
hunters-sec/CVE-2025-43300This is POC for IOS 0click CVE-2025-43300PoC · poc_in_github
ticofookfook/CVE-2025-43300ticofookfook/CVE-2025-43300PoC · poc_in_github
veniversum/cve-2025-43300veniversum/cve-2025-43300PoC · poc_in_github

affected products (48)

Products and version ranges known to be affected.

Apple iOS <15.8.5all versionscert_bundDE
Apple iOS <16.7.12all versionscert_bundDE
Apple iOS <18.6.2all versionscert_bundDE
Apple iPadOS <15.8.5all versionscert_bundDE
Apple iPadOS <16.7.12all versionscert_bundDE
Apple iPadOS <17.7.10all versionscert_bundDE
Apple iPadOS <18.6.2all versionscert_bundDE
Apple macOS Sequoia <15.6.1all versionscert_bundDE
Apple macOS Sonoma <14.7.8all versionscert_bundDE
Apple macOS Ventura <13.7.8all versionscert_bundDE
Apple IOS< 15.8.5cert_bundDE
Apple IOS< 16.7.12cert_bundDE
Apple IOS< 18.6.2cert_bundDE
Apple iPadOS< 15.8.5cert_bundDE
Apple iPadOS< 16.7.12cert_bundDE
Apple iPadOS< 17.7.10cert_bundDE
Apple iPadOS< 18.6.2cert_bundDE
Apple macOS≤ Sequoia <15.6.1cert_bundDE
Apple macOS≤ Sonoma <14.7.8cert_bundDE
Apple macOS≤ Ventura <13.7.8cert_bundDE

showing 20 of 48

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2025-0266Kwetsbaarheid verholpen in Apple MacOS, iOS en iPadOSNL2025-08-22csaf · ncsc_nlNL
Apple heeft een kwetsbaarheid verholpen in verschillende Apple besturingssystemen.
WID-SEC-W-2025-1876Apple iOS, iPadOS und macOS: Schwachstelle ermöglicht CodeausführungDeutsch2025-08-20csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apple iOS, Apple iPadOS und Apple macOS ausnutzen, um eine Memory-Corruption zu verursachen und möglicherweise beliebigen Code auszuführen oder andere nicht näher spezifizierte Angriffe durchzuführen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund ncsc_nl NVD CVE.org MITRE

published 2025-08-21modified 2026-06-17

references (36)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan