CVE-2025-43534 — Apple / iOS and iPadOS

CVE-2025-43534

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected 0 before 18.7.7; affected 0 before 26.2

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/125884
https://support.apple.com/en-us/126793

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.