cve-2025-43482
MEDIUM CVSS 5.5 nvd
Description
The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.
Timeline
- Published
- 2025-12-12
- Last Modified
- 2026-10-07
CVSS Details
- Attack Vector
- LOCAL
- Attack Complexity
- LOW
- Privileges Required
- LOW
Affected Products
- apple macos
Weaknesses (CWE)
CVSS metrics
| Version | Base | Severity | Vector | Exploitability | Impact | Source |
|---|---|---|---|---|---|---|
| 3.1 | 5.5 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
1.8 | 3.6 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
CPE configurations
OR
| CPE | Version range | Vulnerable |
|---|---|---|
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
>= 14.0, < 14.8.3 | yes |
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
>= 15.0, < 15.7.3 | yes |
NVD metadata
- NVD status
- Modified
- Source identifier
product-security@apple.com
References
- https://support.apple.com/en-us/125886
- https://support.apple.com/en-us/125887 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/125888 Release Notes, Vendor Advisory
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cvss": 5.5,
"datePublished": "2025-12-12T21:15:55.283",
"dateUpdated": "2026-10-07T20:10:01.970",
"description": "The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.",
"id": "CVE-2025-43482",
"raw": {
"affected": [
{
"affectedData": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.3",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.3",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"source": "product-security@apple.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E4928B54-3EBC-486A-915B-F20333B30466",
"versionEndExcluding": "14.8.3",
"versionStartIncluding": "14.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3428C860-E02D-4FE9-96F4-58EEAAB8321D",
"versionEndExcluding": "15.7.3",
"versionStartIncluding": "15.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service."
},
{
"lang": "es",
"value": "El problema se abordó con una validación de entrada mejorada. Este problema se solucionó en macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. Una aplicación podría causar una denegación de servicio."
}
],
"id": "CVE-2025-43482",
"lastModified": "2026-10-07T20:10:01.970",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-43482",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-12-15T00:56:56.879246Z",
"version": "2.0.3"
}
}
]
},
"published": "2025-12-12T21:15:55.283",
"references": [
{
"source": "product-security@apple.com",
"url": "https://support.apple.com/en-us/125886"
},
{
"source": "product-security@apple.com",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/125887"
},
{
"source": "product-security@apple.com",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/125888"
}
],
"sourceIdentifier": "product-security@apple.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"severity": "MEDIUM",
"source": "nvd",
"title": "The issue was addressed with improved input validation"
}