CVE-2025-43520: Apple Multiple Products Classic Buffer Overflow

Apple Multiple Products Classic Buffer Overflow Vulnerability. Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.

• CISA KEV-listed (remediation due 2026-04-03)
• EPSS 0.4% (36.9% percentile)
• CVSS 5.5 medium

Related briefings

• Russia's APT29 hijacks websites to hack unpatched phones 2026-11-04

Linked threat actors

• APT29 machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions