Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.7
CVE-2025-43533: iOS, iPadOS, watchOS, macOS, visionOS, tvOS: Malicious Device Crashes Your Phone/Tablet/Watch
CVE-2025-43533 · published 10 months ago
Summary
A security update has fixed a weakness in several Apple operating systems that could allow a malicious device to crash your iPhone, iPad, Apple Watch, or computer. This is a serious issue, but Apple has already released patches to protect you. Make sure you update your devices as soon as possible to stay safe.
What to do
- Update apple ipados to version 26.2 or later.
- Update apple iphone_os to version 26.2 or later.
- Update apple macos to version 26.2 or later.
- Update apple tvos to version 26.2 or later.
- Update apple visionos to version 26.2 or later.
- Update apple watchos to version 26.2 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ipados |
< 26.2 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 26.2 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | macos |
< 26.2 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | tvos |
< 26.2 cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
| apple | visionos |
< 26.2 cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* |
| apple | watchos |
< 26.2 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
Original advisory text
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS...
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.
References
- https://support.apple.com/en-us/125884 Release Notes Vendor Advisory
- https://support.apple.com/en-us/125886 Vendor Advisory
- https://support.apple.com/en-us/125889 Release Notes Vendor Advisory
- https://support.apple.com/en-us/125890 Release Notes Vendor Advisory
- https://support.apple.com/en-us/125891 Release Notes Vendor Advisory
- https://support.apple.com/en-us/126349
- https://support.apple.com/en-us/126350
- https://support.apple.com/en-us/126347
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
5.7
Medium
Type
CWE-20Improper Input Validation
Timeline
Published17 Dec 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-43533 · NVD
Track software like this
Free during beta