Security Vulnerability Report
中文
CVE-2025-43373 CVSS 7.5 HIGH

CVE-2025-43373

Published: 2025-11-04 02:15:45
Last Modified: 2026-04-02 19:20:35

Description

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVSS Details

CVSS Score
7.5
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Configurations (Affected Products)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* - VULNERABLE
macOS Sequoia < 15.7.2
macOS Sonoma < 14.8.2
macOS Tahoe < 26.1

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
// CVE-2025-43373 PoC - macOS Kernel Memory Corruption // Note: This is a conceptual PoC for educational purposes only // Actual exploitation requires specific conditions and macOS version #include <stdio.h> #include <stdlib.h> #include <string.h> // Simulated kernel memory corruption trigger void trigger_kernel_memory_corruption() { printf("[*] Attempting to trigger CVE-2025-43373...\n"); // In real scenario, this would involve: // 1. Exploiting improper memory handling in kernel module // 2. Crafting specific IOStorageFamily user-client interactions // 3. Triggering race condition in kernel memory management printf("[!] This requires local code execution with specific\n"); printf("[!] kernel conditions. Check Apple security advisory.\n"); } int main(int argc, char *argv[]) { printf("CVE-2025-43373 - Apple macOS Kernel Memory Issue\n"); printf("CVSS: 7.5 (High)\n\n"); trigger_kernel_memory_corruption(); return 0; }

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-43373", "sourceIdentifier": "[email protected]", "published": "2025-11-04T02:15:44.607", "lastModified": "2026-04-02T19:20:35.433", "vulnStatus": "Modified", "cveTags": [], "descriptions": [{"lang": "en", "value": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-119"}, {"lang": "en", "value": "CWE-787"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionStartIncluding": "14.0", "versionEndExcluding": "14.8.2", "matchCriteriaId": "9827CBDC-8C03-46BA-B534-8533F0975804"}, {"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionStartIncluding": "15.0", "versionEndExcluding": "15.7.2", "matchCriteriaId": "4BE8199E-63D1-496C-B107-52853CFC2311"}]}]}], "references": [{"url": "https://support.apple.com/en-us/125634", "source": "[email protected]"}, {"url": "https://support.apple.com/en-us/125635", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}, {"url": "https://support.apple.com/en-us/125636", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}]}}