- 191/2025
- High
Apple has released security updates to address a vulnerability across macOS Sequoia, Sonoma, and Ventura.
The addressed vulnerability could allow the attacker to execute arbitrary code and gain access to the affected system, caused by a memory corruption issue in the ImageIO component, while processing a malicious image file.
Apple macOS Out-of-Bounds Write Vulnerability (CVE-2025-43300):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
It should be highlighted that Apple is aware that the vulnerability “CVE-2025- 43300” is being exploited in the wild.
Vulnerabilities
CVE-2025-43300
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.