CVE-2025-43520—Apple Multiple Products Classic Buffer Overflow Vulnerability

漏洞名称

Apple Multiple Products Classic Buffer Overflow Vulnerability

描述

Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://support.apple.com/en-us/125632
• https://support.apple.com/en-us/125633
• https://support.apple.com/en-us/125634
• https://support.apple.com/en-us/125635
• https://support.apple.com/en-us/125636
• https://support.apple.com/en-us/125637
• https://support.apple.com/en-us/125638
• https://support.apple.com/en-us/125639
• https://nvd.nist.gov/vuln/detail/CVE-2025-43520

相关新闻文章

• 13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet SeedsSeptember 1, 2026
• Apple expands iOS 18 updates to more iPhones to block DarkSword attacksApril 1, 2026
• CISA orders feds to patch DarkSword iOS flaws exploited attacksMarch 23, 2026
• CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026March 21, 2026

相关 CWE

• CWE-120