Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
I also developed a PFA file that triggers the CVE-2025-43400 vulnerability. you can find it on my GitHub. https://t.co/9sZFF237zK
Post summary
The user has provided a functional exploit (a PFA file) that triggers CVE‑2025‑43400, linking to the code on GitHub, indicating proof of concept and active exploitation capability but no evidence of real‑world attacks or patches.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | ipados | 26.0 | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | iphone_os | 26.0 | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | macos | 26.0 | - | - |
| OS | apple | visionos | - | - | - |