THREATOPS

THREAT OPS › CVEs › CVE-2025-43520

CVE-2025-43520 — Apple Multiple Products Classic Buffer Overflow Vulnerability

CISA KEVExploited: confirmedApple

Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.

Vulnerability details

Affected productsMultiple Products
KEV remediation due2026-04-03

Related reporting

March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Dayrecordedfuture
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actorsmandiant_gti