CVE-2025-43534: Use After Free
Published Dec 12, 2025
·Updated
802.1X. An authentication issue was addressed with improved state management.
Other sources
A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock.
— MITRE
App Store. A permissions issue was addressed with additional restrictions.
— Apple
AppleJPEG. The issue was addressed with improved bounds checks.
— Apple
AppleKeyStore. A use after free issue was addressed with improved memory management.
— Apple
Audio. A use-after-free issue was addressed with improved memory management.
— Apple
Credit
floeki(IES Red Team of ByteDance), Zhongcheng Li(IES Red Team of ByteDance), Michael Reeves@@IntegralPilot, Andrei Simion, piffz, Daniel Nurkin, Al Sadman Awal, Mohamed Hamdadou & Mahran Alhazmi, Hichem Maloufi, Christian Mina, Gerson Aldaz, qwerty j0y & Ricardo Garcia, Dorian Del Valle, an anonymous researcher, Riley Walz, CVE-2024-7264, CVE-2025-9086, Yiğit Ocak, Noah Gregory (wts.dev), Andrew Calvano(Meta Product Security), Lucas Pinheiro(Meta Product Security), Duy Trần@@khanhduytran0, iG0x72(XiguaSec), JJ(XiguaSec), Lehan Dilusha Jayasinghe, Kaitao Xie(Alibaba Group), Xiaolong Bai(Alibaba Group), CVE-2025-5918, Sumanth Rao(UC San Diego), Ye Shu(UC San Diego), Stefan Savage(UC San Diego), Aaron Schulman(UC San Diego), Geoffrey M. Voelker(UC San Diego), Enze Liu (Carnegie Mellon University), Rosyna Keller(Totally Not Malicious Software), Google Threat Analysis Group, an anonymous researcher(Technische Hochschule Ingolstadt), Michael Schmutzer(Technische Hochschule Ingolstadt), Kirin@@Pwnrin, Iván Savransky, Bing Shi(Alibaba Group), Wenchao Li(Alibaba Group), (Indiana University Bloomington), Luyi Xing(Indiana University Bloomington), Hossein Lotfi@@hosselot(Trend Micro Zero Day Initiative), Nan Wang@@eternalsakura13, Google Big Sleep, Phil Pizlo(Epic Games), Apple, 이동하 (Lee Dong Ha(BoB 14th), Héloïse Gollier, Mathy Vanhoef (KU Leuven), Johnny Franks (zeroxjf), Justin Cohen(Google), Cristian Dinca (icmd.tech), Hossein Lotfi@@hosselot(TrendAI Zero Day Initiative), Etienne Charron (Renault), Victoria Martini (Renault), Zhongcheng Li(IES Red Team), CVE-2025-14524, Andreas Jaegersberger & Ro Achterberg(Nosebeard Labs), CVE-2025-64505, Gor Aleksanyan(BoB 0xB6), Dhiyanesh Selvaraj@@redroot97(BoB 0xB6), 이동하 (Lee Dong Ha(BoB 0xB6), Jian Lee@@speedyfriend433, Johnny Franks@@zeroxjf, Alex Radocea, Hazem Issa, Yongdae Kim @ SysSec, KAIST, Caspian Tarafdar, Andrew Becker, webb, Thomas Espach, Mike Cardwell(grepular), Bob Lord, Hongze Wu(Ant Group Infrastructure Security Team), Shuaike Dong(Ant Group Infrastructure Security Team), @@hamayanhamayan
Affected Software
8 affected componentsFixes available
Apple iOS<18.7.7
18.7.7
Apple iPadOS<18.7.7
18.7.7
Apple iPadOS<18.7.7
Apple iPadOS>=26.0<26.2
Apple iPhone OS<18.7.7
Apple iPhone OS>=26.0<26.2
Apple iOS<26.2
26.2
Apple iPadOS<26.2
26.2
Event History
Dec 12, 2025
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
Mar 25, 2026
CVE Published
via MITRE·12:35 AM
Data Sourced
via MITRE·12:35 AM
DescriptionWeakness
Data Sourced
via NVD·01:17 AM
DescriptionSeverityWeaknessAffected Software
May 12, 2026
Updated
via Apple·06:36 PM
DescriptionWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2025-46288
- CVE-2025-43539
- CVE-2025-46286
- CVE-2025-43537
- CVE-2025-46287
- CVE-2024-7264
- CVE-2025-9086
- CVE-2025-43542
- CVE-2025-43518
- CVE-2025-43532
- CVE-2025-46279
- CVE-2025-43534
- CVE-2025-46285
- CVE-2025-5918
- CVE-2025-46311
- CVE-2025-43475
- CVE-2025-46276
- CVE-2025-43533
- CVE-2025-46300
- CVE-2025-46301
- CVE-2025-46302
- CVE-2025-46303
- CVE-2025-46304
- CVE-2025-46305
- CVE-2025-43428
- CVE-2025-46277
- CVE-2025-43538
- CVE-2025-46290
- CVE-2025-46292
- CVE-2025-43541
- CVE-2025-43536
- CVE-2025-43535
- CVE-2025-46298
- CVE-2025-43501
- CVE-2025-43531
- CVE-2025-14174
- CVE-2025-43529
- CVE-2025-46299
- CVE-2025-43511
- CVE-2026-28865
- CVE-2026-20637
- CVE-2026-28879
- CVE-2026-28866
- CVE-2026-20690
- CVE-2026-28886
- CVE-2026-28878
- CVE-2025-14524
- CVE-2026-28876
- CVE-2026-20668
- CVE-2026-28880
- CVE-2025-64505
- CVE-2026-28868
- CVE-2026-28867
- CVE-2026-20687
- CVE-2026-28864
- CVE-2026-28860
- CVE-2026-28967
- CVE-2026-28852
- CVE-2026-20657
- CVE-2026-20665
- CVE-2026-20643
- CVE-2025-43376
- CVE-2026-28861
- CVE-2026-28871