CVE-2025-43238

MediumCVSS 6.2

Published: 02/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

In macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, an integer overflow was fixed with improved input validation. An app may be able to cause unexpected system termination.

Risk Assessment

An attacker could exploit this vulnerability to cause a system crash (DoS), potentially disrupting services and affecting system availability.

Recommendation

It is recommended to update macOS to Sequoia 15.6, Sonoma 14.7.7, or Ventura 13.7.7, which include the fix.

Original NVD description (English source)

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.