Skip to content
fr Sign in
9.8 Critical

CVE-2025-43220 This issue was addressed with improved validation of symlinks

Description

This issue was addressed with improved validation of symlinks. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data.

Affected products and versions

Product Affected versions Fixed in
iPadOS 17.7 earliest → < 17.7.9 17.7.9
macOS 15.6 earliest → < 15.6 15.6
macOS 14.7 earliest → < 14.7.7 14.7.7
macOS 13.7 earliest → < 13.7.7 13.7.7

References

Timeline

  1. Published
  2. Last modified

Other CVEs of iPadOS

The 166 CVEs of iPadOS →
CVE-2026-28950 A logging issue was addressed with improved data redaction 6.2 Medium CVE-2025-43210 An out-of-bounds access issue was addressed with improved bounds checking 6.3 Medium CVE-2025-31216 The issue was addressed with improved checks 2.4 Low CVE-2025-43374 An out-of-bounds read was addressed with improved bounds checking 4.3 Medium
Track this CVE