CVE-2025-43504
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A buffer overflow was addressed with improved bounds checking in Xcode 26.1. The vulnerability could allow a user in a privileged network position to cause a denial-of-service.
Risk Assessment
An attacker in a privileged network position could exploit the vulnerability to cause a denial-of-service, disrupting application or system availability. This may lead to service interruptions and loss of availability.
Recommendation
Update Xcode to version 26.1 or later, which includes the fix. It is also recommended to monitor network traffic for suspicious activity.
Other vulnerabilities in Xcode
See all- CVE-2025-43505High
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption.
- CVE-2025-43370Medium
A path handling issue was addressed with improved validation. The vulnerability exists in Xcode 26 and involves processing an overly large path value that may crash a process.
Original NVD description (English source)
A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS