Security Vulnerability Report
中文
CVE-2025-43495 CVSS 5.4 MEDIUM

CVE-2025-43495

Published: 2025-11-04 02:15:53
Last Modified: 2025-12-17 21:16:08

Description

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to monitor keystrokes without user permission.

CVSS Details

CVSS Score
5.4
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Configurations (Affected Products)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* - VULNERABLE
Apple iOS < 18.7.2
Apple iOS < 26.1
Apple iPadOS < 18.7.2
Apple iPadOS < 26.1

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
// CVE-2025-43495 PoC - Conceptual Proof of Concept // Note: This is a conceptual example for educational purposes only import Foundation class KeystrokeMonitor { // This PoC demonstrates the vulnerability concept // In vulnerable versions, this could capture keystrokes without permission func attemptKeystrokeCapture() -> Bool { // Vulnerable code pattern - accessing input without proper checks let inputMonitor = CGEventSource(nil) // Attempt to register for input events // In vulnerable versions, this may succeed without user consent let eventMask = (1 << CGEventType.keyDown.rawValue) | (1 << CGEventType.keyUp.rawValue) // Simulated keystroke capture attempt print("Attempting to monitor keystrokes...") print("Vulnerable system may allow this without permission prompt") return true } } // Mitigation: Update to iOS 18.7.2/iPadOS 18.7.2 or later // iOS 26.1/iPadOS 26.1 or later // Security checks that should be implemented: func verifyInputMonitoringPermission() -> Bool { // After patch, proper permission check is required // Application must request and receive user authorization // before accessing any keyboard input events return checkEntitlement("com.apple.security.keyboard-monitoring") }

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-43495", "sourceIdentifier": "[email protected]", "published": "2025-11-04T02:15:52.687", "lastModified": "2025-12-17T21:16:08.303", "vulnStatus": "Modified", "cveTags": [], "descriptions": [{"lang": "en", "value": "The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to monitor keystrokes without user permission."}, {"lang": "es", "value": "El problema se abordó con comprobaciones mejoradas. Este problema está solucionado en iOS 18.7.2 y iPadOS 18.7.2. Una aplicación podría monitorizar pulsaciones de teclas sin permiso del usuario."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 2.5}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-284"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "versionEndExcluding": "26.1", "matchCriteriaId": "6D51AEDC-9086-4010-B3BF-C652D65D09C8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "versionEndExcluding": "26.1", "matchCriteriaId": "3981A7BE-BC98-4C6F-AE38-D68839368925"}]}]}], "references": [{"url": "https://support.apple.com/en-us/125632", "source": "[email protected]"}, {"url": "https://support.apple.com/en-us/125633", "source": "[email protected]"}]}}