CVE-2025-43370

MediumCVSS 4.0/10Last modified Oct 1, 2026

Description

A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Sep 15, 2025
Last modified
Oct 1, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-433718.2This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its sandbox.CVE-2025-433727.8The issue was addressed with improved input validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Tahoe 26, tvCVE-2025-433737.5The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. ACVE-2025-433744.3An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS SeqCVE-2025-433755.5The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process.CVE-2025-433767.5A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOCVE-2025-433775.5An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2CVE-2025-433785.5A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may beCVE-2025-433795.5This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS CVE-2025-43386.8Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration files read from the network device. An attackCVE-2025-433805.5An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2,CVE-2025-433815.5This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete
CVE-2025-43370: Medium severity, CVSS 4.0 | Vulnix