CVE-2025-43359
Full vulnerability record from the local CVENow database.
Description
A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A UDP server socket bound to a local interface may become bound to all interfaces.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2025-09-15 23:15:37.923000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-43359",
"sourceIdentifier": "[email protected]",
"published": "2025-09-15T23:15:37.923",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A UDP server socket bound to a local interface may become bound to all interfaces."
},
{
"lang": "es",
"value": "Un problema lógico se abordó con una gestión de estado mejorada. Este problema está solucionado en tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26 y iPadOS 26, macOS Sequoia 15.7, visionOS 26, iOS 18.7 y iPadOS 18.7. Un socket de servidor UDP vinculado a una interfaz local puede quedar vinculado a todas las interfaces."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Apple",
"product": "iOS and iPadOS",
"versions": [
{
"version": "0",
"lessThan": "18.7",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "26",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "0",
"lessThan": "14.8",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "15.7",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "26",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Apple",
"product": "tvOS",
"versions": [
{
"version": "0",
"lessThan": "26",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Apple",
"product": "visionOS",
"versions": [
{
"version": "0",
"lessThan": "26",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Apple",
"product": "watchOS",
"versions": [
{
"version": "0",
"lessThan": "26",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-09-16T13:37:15.397338Z",
"id": "CVE-2025-43359",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-670"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"versionEndExcluding": "18.7",
"matchCriteriaId": "5006F7D9-931C-4C7A-960A-C46338855CBB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"versionEndExcluding": "18.7",
"matchCriteriaId": "025344A4-9E22-44FD-AF62-67FE85D1C621"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "14.0",
"versionEndExcluding": "14.8",
"matchCriteriaId": "9EF389A5-03CF-478D-9CE9-26556CBD4CEC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "15.0",
"versionEndExcluding": "15.7",
"matchCriteriaId": "D37B8DD2-ECC6-469E-A1A3-148B98F9DEB6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "26.0",
"matchCriteriaId": "BD4D5965-C1B7-4C82-AB16-BA4D41F2FBCA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "26.0",
"matchCriteriaId": "E33744A8-68C0-4822-B08E-100911C18404"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
"versionEndExcluding": "26.0",
"matchCriteriaId": "66CF3395-7CC9-41FD-8419-815AC6022191"
}
]
}
]
}
],
"references": [
{
"url": "https://support.apple.com/en-us/125108",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/125109",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/125110",
"source": "[email protected]"
},
{
"url": "https://support.apple.com/en-us/125111",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/125112",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/125114",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/125115",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "https://support.apple.com/en-us/125116",
"source": "[email protected]",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "http://seclists.org/fulldisclosure/2025/Sep/49",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Sep/53",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Sep/54",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Sep/55",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Sep/56",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Sep/57",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2025/Sep/58",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}