cve-2025-43482

MEDIUM CVSS 5.5 nvd
Description

The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.

Timeline
Published
2025-12-12
Last Modified
2026-10-07
CVSS Details
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
Affected Products
  • apple macos
Weaknesses (CWE)
CVSS metrics
Version Base Severity Vector Exploitability Impact Source
3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 1.8 3.6 134c704f-9b21-4f2e-91b3-4a467353bcc0
CPE configurations
OR
CPE Version range Vulnerable
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* >= 14.0, < 14.8.3 yes
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* >= 15.0, < 15.7.3 yes
NVD metadata
NVD status
Modified
Source identifier
product-security@apple.com
References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 5.5,
  "datePublished": "2025-12-12T21:15:55.283",
  "dateUpdated": "2026-10-07T20:10:01.970",
  "description": "The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service.",
  "id": "CVE-2025-43482",
  "raw": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "macOS",
            "vendor": "Apple",
            "versions": [
              {
                "lessThan": "14.8.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "15.7.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "26.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "source": "product-security@apple.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "E4928B54-3EBC-486A-915B-F20333B30466",
                "versionEndExcluding": "14.8.3",
                "versionStartIncluding": "14.0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "3428C860-E02D-4FE9-96F4-58EEAAB8321D",
                "versionEndExcluding": "15.7.3",
                "versionStartIncluding": "15.0",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to cause a denial-of-service."
      },
      {
        "lang": "es",
        "value": "El problema se abordó con una validación de entrada mejorada. Este problema se solucionó en macOS Tahoe 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3. Una aplicación podría causar una denegación de servicio."
      }
    ],
    "id": "CVE-2025-43482",
    "lastModified": "2026-10-07T20:10:01.970",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-43482",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-15T00:56:56.879246Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-12T21:15:55.283",
    "references": [
      {
        "source": "product-security@apple.com",
        "url": "https://support.apple.com/en-us/125886"
      },
      {
        "source": "product-security@apple.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://support.apple.com/en-us/125887"
      },
      {
        "source": "product-security@apple.com",
        "tags": [
          "Release Notes",
          "Vendor Advisory"
        ],
        "url": "https://support.apple.com/en-us/125888"
      }
    ],
    "sourceIdentifier": "product-security@apple.com",
    "vulnStatus": "Modified",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "severity": "MEDIUM",
  "source": "nvd",
  "title": "The issue was addressed with improved input validation"
}
View JSON API Download JSON