Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2025-43200

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, mac

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple iOS and iPadOS

  • 0 to < 15.8.4affected
  • 0 to < 16.7.11affected
  • 0 to < 18.3.1affected

Apple iPadOS

  • 0 to < 17.7.5affected

Apple macOS

  • 0 to < 13.7.4affected
  • 0 to < 14.7.4affected
  • 0 to < 15.3.1affected

Apple visionOS

  • 0 to < 2.3.1affected

Apple watchOS

  • 0 to < 11.3.1affected

References