iOS CVE-2025-43494
HIGHCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
2DescriptionNVD
A mail header parsing issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An attacker may be able to cause a persistent denial-of-service.
AnalysisAI
Mail header parsing flaw in Apple operating systems allows unauthenticated remote attackers to trigger persistent denial-of-service conditions across iOS, iPadOS, macOS, visionOS, and watchOS platforms. The vulnerability affects all major Apple OS releases prior to January 2025 patches (iOS/iPadOS 18.7.2/26.1, macOS Sequoia 15.7.2/Sonoma 14.8.2/Tahoe 26.1, visionOS 26.1, watchOS 26.1). With EPSS exploitation probability at 0.19% (41st percentile) and no public exploit identified at time of analysis, real-world risk appears moderate despite the 7.5 CVSS score.
Technical ContextAI
This vulnerability stems from improper input validation (CWE-20) in Apple's mail header parsing routines, a component shared across the company's ecosystem. Mail header parsing is critical for email client functionality, processing MIME headers, RFC 5322 fields, and metadata before message rendering. The flaw allows malformed or specially crafted email headers to trigger resource exhaustion or infinite loops in the parsing logic. The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates the vulnerability exists in network-accessible mail processing code that executes automatically without user interaction, likely within the system's mail daemon or framework-level email handling services used by Mail.app and other email clients.
RemediationAI
Apply vendor-released patches immediately by upgrading to the fixed versions: iOS 18.7.2 or iOS 26.1, iPadOS 18.7.2 or iPadOS 26.1, macOS Sequoia 15.7.2 or macOS Tahoe 26.1, macOS Sonoma 14.8.2, visionOS 26.1, and watchOS 26.1. Updates can be installed through System Settings on macOS (System Preferences > Software Update) or Settings > General > Software Update on iOS/iPadOS devices. For environments unable to patch immediately, consider email filtering rules to block messages with anomalous header structures, though this provides incomplete protection and should only be temporary. Complete advisory details and update instructions available at https://support.apple.com/en-us/125632, https://support.apple.com/en-us/125633, https://support.apple.com/en-us/125634, https://support.apple.com/en-us/125635, https://support.apple.com/en-us/125636, https://support.apple.com/en-us/125638, and https://support.apple.com/en-us/125639.
More from same product – last 7 days
SQL injection in Pimcore's CustomReportsBundle (versions ≤ 12.3.5) lets an authenticated user holding the reports_config
Arbitrary code execution in Docker Model Runner's vllm-metal inference backend on macOS allows any container on the Dock
Arbitrary code execution in Docker Desktop's Model Runner on macOS allows any container on the Docker network to escape
Local privilege escalation in Apple macOS allows a malicious app already running with low privileges to elevate to root
Local privilege escalation in Canonical Multipass for macOS before 1.16.3 allows a low-privileged local user to obtain r
Share
External POC / Exploit Code
Leaving vuln.today