CVE-2025-43294: Buffer Overflow
Published Sep 15, 2025
·Updated
Accessibility. A permissions issue was addressed with additional restrictions.
Other sources
AirPort. A permissions issue was addressed with additional restrictions.
— Apple
AMD. A buffer overflow was addressed with improved bounds checking.
— Apple
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26, tvOS 26.1, watchOS 26.1. An app may be able to access sensitive user data.
— MITRE
AppKit. The issue was resolved by blocking unsigned services from launching on Intel Macs.
— Apple
Apple Account. A privacy issue was addressed with improved checks.
— Apple
Credit
Ron Masas(BreakPoint), Pinak Oza, an anonymous researcher, Gergely Kalman@@gergely_kalman, Hikerell (Loadshine Lab), Zhongcheng Li(IES Red Team of ByteDance), Hossein Lotfi@@hosselot(Trend Micro Zero Day Initiative), iisBuri, Apple, Cristian Dinca (icmd.tech), Dave G.(supernetworks), Alex Radocea(supernetworks), Taavi Eomäe(Zone Media), Romain Lebesle(Khatima), Himanshu Bharti@@Xpl0itme(Khatima), Dalibor Milanovic, @@RenwaX23, Stanislav Jelezoglo, Aleksejs Popovs, Phil Beauvoir, Google Big Sleep, Nan Wang@@eternalsakura13, rheza@@ginggilBesel(Trend Micro Zero Day Initiative), shandikri(Trend Micro Zero Day Initiative), Gary Kwong(Trend Micro Zero Day Initiative), Justin Cohen(Google), Tom Van Goethem, JZ, Michael DePlante@@izobashi(Trend Micro Zero Day Initiative), Gary Kwong, rheza@@ginggilBesel, Duy Trần@@khanhduytran0, Dennis Briner, Wojciech Regula(SecuRing), Kirin@@Pwnrin(Fudan University), LFY@@secsys(Fudan University), Lukaah Marlowe, pattern-f@@pattern_F_, Rosyna Keller(Totally Not Malicious Software), Google Threat Analysis Group, Kirin@@Pwnrin, Asaf Cohen, KPC(Cisco Talos), Joshua Thomas, Isaiah Wan, Will Caine, Thomas Salomon, Sufiyan Gouri (TU Darmstadt), Phil Scott & Richard Hyunho Im (@richeeta)@@MrPeriPeri, Mark Bowers, Joey Hewitt, Dylan Rollins, Arthur Baudoin, Andr.Ess, Mikael Kinnman, Lehan Dilusha Jayasinghe, Rodolphe BRUNETTI@@eisw0lf(Lupus Nova), Csaba Fitzl@@theevilbit(Kandji), ABC Research s.r.o., Mickey Jin@@patch1t, Nolan Astrein(Kandji), Mickey Jin@@patch1t(Cisco Talos), Kirin@@Pwnrin(Cisco Talos), Claudio Bozzato(Cisco Talos), Francesco Benvenuto(Cisco Talos), Zhongquan Li@@Guluisacat, Bilal Siddiqui, Michael Reeves@@IntegralPilot, Noah Gregory (wts.dev), Dawuge(Shuffle Team), Guilherme Rambo(Best Buddy Apps), Yinyi Wu@@_3ndy1(Dawn Security Lab of JD), @@zlluny(Trend Micro Zero Day Initiative), 이동하 (Lee Dong Ha)(SSA Lab), Matej Moravec@@MacejkoMoravec, Shantanu Thakur, Wang Yu(Cyberserval), Anonymous(Trend Micro Zero Day Initiative), Jian Lee@@speedyfriend433, Yiğit Can YILMAZ@@yilmazcanyigit, Keisuke Hosoda, Ye Zhang@@VAR10CK(Baidu Security), Viktor Oreshkin, Nathaniel Oh@@calysteon, Rodolphe Brunetti@@eisw0lf(Lupus Nova), CVE-2025-40909, @@zlluny, CVE-2024-27280, Ye Zhang(Baidu Security), 정답이 아닌 해답, Kirin@@Pwnrin(Computer Science), Cristian Dinca(Computer Science), Romania, CVE-2025-6965, Seo Hyun-gyu@@wh1te4ever, Luke Roberts@@rookuu, Ferdous Saljooki@@malwarezoo(Jamf), Justin Elliot Fu, Pyrophoria(GrapheneOS), an anonymous researcher(GrapheneOS), James J Kalafus, Michel Migdal, ken super, Jaydev Ahire, Big Bear, Ignacio Sanmillan@@ulexec, Mike Cardwell(grepular), Bob Lord, Pawel Wylecial(REDTEAM)
Affected Software
6 affected componentsFixes available
Apple macOS Tahoe<26
26
Apple macOS<26.0
Apple WatchOS<26.1
26.1
Apple tvOS<26.1
26.1
Apple iOS<26.1
26.1
Apple iPadOS<26.1
26.1
Event History
Sep 15, 2025
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
Updated
via Apple·12:00 AM
Description
CVE Published
via MITRE·10:35 PM
Data Sourced
via MITRE·10:35 PM
DescriptionWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Nov 3, 2025
Updated
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionAffected Software
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2025-43455
- CVE-2025-43447
- CVE-2025-43462
- CVE-2025-43379
- CVE-2025-43448
- CVE-2025-43436
- CVE-2025-43445
- CVE-2025-43507
- CVE-2025-43400
- CVE-2025-43444
- CVE-2025-43398
- CVE-2025-43510
- CVE-2025-43520
- CVE-2025-43413
- CVE-2025-43494
- CVE-2025-43496
- CVE-2025-43294
- CVE-2025-43459
- CVE-2025-43503
- CVE-2025-43500
- CVE-2025-43480
- CVE-2025-43458
- CVE-2025-43430
- CVE-2025-43443
- CVE-2025-43440
- CVE-2025-43438
- CVE-2025-43457
- CVE-2025-43434
- CVE-2025-43435
- CVE-2025-43425
- CVE-2025-43433
- CVE-2025-43431
- CVE-2025-43432
- CVE-2025-43429
- CVE-2025-43392
- CVE-2025-43407
- CVE-2025-43386
- CVE-2025-43385
- CVE-2025-43384
- CVE-2025-43383
- CVE-2025-43427
- CVE-2025-43441
- CVE-2025-43442
- CVE-2025-43449
- CVE-2025-43423
- CVE-2025-43450
- CVE-2025-43426
- CVE-2025-43350
- CVE-2025-43498
- CVE-2025-43437
- CVE-2025-43424
- CVE-2025-43389
- CVE-2025-43439
- CVE-2025-43391
- CVE-2025-46316
- CVE-2025-43493
- CVE-2025-43502
- CVE-2025-43454
- CVE-2025-43418
- CVE-2025-43460
- CVE-2025-43422
- CVE-2025-43452
- CVE-2025-43495
- CVE-2025-43421
- CVE-2025-43288
- CVE-2025-43208
- CVE-2025-43312
- CVE-2025-43321
- CVE-2025-43344
- CVE-2025-31268
- CVE-2025-43331
- CVE-2025-43317
- CVE-2025-43340
- CVE-2025-43337
- CVE-2025-43320
- CVE-2025-43285
- CVE-2025-43330
- CVE-2025-43346
- CVE-2025-43361
- CVE-2025-43451
- CVE-2025-43307
- CVE-2025-43354
- CVE-2025-43303
- CVE-2025-43357
- CVE-2025-43323
- CVE-2025-43403
- CVE-2025-43349
- CVE-2025-43292
- CVE-2025-43372
- CVE-2025-24088
- CVE-2025-43305
- CVE-2025-43290
- CVE-2025-43289
- CVE-2025-46284
- CVE-2025-43316
- CVE-2025-31271
- CVE-2025-31270
- CVE-2025-43326
- CVE-2025-43283
- CVE-2025-46280
- CVE-2025-43325
- CVE-2025-43287
- CVE-2025-43338
- CVE-2025-43302
- CVE-2025-31255
- CVE-2025-43366
- CVE-2025-43359
- CVE-2025-43345
- CVE-2025-43299
- CVE-2025-43295
- CVE-2025-43353
- CVE-2025-43319
- CVE-2025-43315
- CVE-2025-43355
- CVE-2025-43207
- CVE-2025-43279
- CVE-2025-43301
- CVE-2025-43298
- CVE-2025-46310
- CVE-2025-40909
- CVE-2025-43297
- CVE-2025-31269
- CVE-2025-43204
- CVE-2024-27280
- CVE-2025-46306
- CVE-2025-43327
- CVE-2025-43329
- CVE-2025-43328
- CVE-2025-43318
- CVE-2025-46307
- CVE-2025-31259
- CVE-2025-43332
- CVE-2025-43293
- CVE-2025-43291
- CVE-2025-43286
- CVE-2025-43369
- CVE-2025-43358
- CVE-2025-43367
- CVE-2025-43190
- CVE-2025-43333
- CVE-2025-24197
- CVE-2025-6965
- CVE-2025-43341
- CVE-2025-43314
- CVE-2025-43304
- CVE-2025-43306
- CVE-2025-43347
- CVE-2025-43296
- CVE-2025-43311
- CVE-2025-43308
- CVE-2025-43262
- CVE-2025-43356
- CVE-2025-43272
- CVE-2025-43343
- CVE-2025-43342
- CVE-2025-43419
- CVE-2025-43376
- CVE-2025-43368
- CVE-2025-43310
Frequently Asked Questions
1
What is the severity of CVE-2025-43294?
The severity of CVE-2025-43294 has not been publicly disclosed, but it addresses critical issues such as buffer overflow and permissions problems.
2
How do I fix CVE-2025-43294?
To fix CVE-2025-43294, update your system to macOS Tahoe version 26 or higher.
3
What types of vulnerabilities are involved in CVE-2025-43294?
CVE-2025-43294 involves permissions issues, buffer overflow vulnerabilities, and improper handling of environment variables.
4
Which software is affected by CVE-2025-43294?
CVE-2025-43294 affects Apple macOS Tahoe versions prior to 26.
5
What improvements were made in the fix for CVE-2025-43294?
The fix for CVE-2025-43294 includes additional restrictions for permissions and improved validation and bounds checking.