CVE-2025-43190

Description

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.

References

https://support.apple.com/en-us/125116

https://support.apple.com/en-us/125115

https://support.apple.com/en-us/125112

https://support.apple.com/en-us/125111

https://support.apple.com/en-us/125110

https://support.apple.com/en-us/125108

http://seclists.org/fulldisclosure/2025/Sep/58

http://seclists.org/fulldisclosure/2025/Sep/57

http://seclists.org/fulldisclosure/2025/Sep/55

http://seclists.org/fulldisclosure/2025/Sep/54

http://seclists.org/fulldisclosure/2025/Sep/53

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS