CVE-2025-43277

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.8, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a maliciously crafted audio file may lead to memory corruption.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.039

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.6 (Software Update) (Auto Reboot)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma 14.8 (Software Update) (Auto Reboot)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma 14.8.1 (Software Update)(Auto Reboot)(CVE-2025-43400)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)(Deployment-Only)Mac
Multiple vulnerabilities are fixed in Mac OS - Sonoma 14.8.3 (Software Update)(Auto Reboot)Mac
Multiple vulnerabilities are fixed in Mac OS Sequoia 15.6.1 (Software Update) (Auto Reboot)(CVE-2025-43300)Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-612608Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-612607Mac OS - Sonoma 14.8.2 (Software Update)(Auto Reboot)
PATCH-613035Mac OS - Sonoma 14.8.3 (Software Update)(Auto Reboot)
PATCH-612608Mac OS Sequoia 15.7.2 (Software Update) (Auto Reboot)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234