{"id":"CVE-2025-43187","state":"PUBLISHED","title":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexp","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code.","publishedAt":"2025-08-29T00:28:52.591Z","updatedAt":"2026-04-02T18:25:09.110Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"13.7.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.7.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.6","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/124149","https://support.apple.com/en-us/124150","https://support.apple.com/en-us/124151","http://seclists.org/fulldisclosure/2025/Jul/34","http://seclists.org/fulldisclosure/2025/Jul/33","http://seclists.org/fulldisclosure/2025/Jul/32"],"weaknesses":[],"ingestedAt":"2026-10-29T20:09:17.366Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/43xxx/CVE-2025-43187.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-43187","state":"PUBLISHED","datePublished":"2025-08-29T00:28:52.591Z","dateUpdated":"2026-04-02T18:25:09.110Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2025-04-16T15:24:37.087Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Running an hdiutil command may unexpectedly execute arbitrary code."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"13.7.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.7.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.6","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/124149"},{"url":"https://support.apple.com/en-us/124150"},{"url":"https://support.apple.com/en-us/124151"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Running an hdiutil command may unexpectedly execute arbitrary code"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:25:09.110Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-43187","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-08-30T03:55:33.425377Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","description":"CWE-noinfo Not enough information"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T17:47:49.360Z"}},{"title":"CVE Program Container","references":[{"url":"http://seclists.org/fulldisclosure/2025/Jul/34"},{"url":"http://seclists.org/fulldisclosure/2025/Jul/33"},{"url":"http://seclists.org/fulldisclosure/2025/Jul/32"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T19:59:23.790Z"}}]}}}