CVE-2025-43537 — Apple / iOS and iPadOS

CVE-2025-43537

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2. Restoring a maliciously crafted backup file may lead to modification of protected system files.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected 0 before 18.7.5; affected 0 before 26.2

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/125884
https://support.apple.com/en-us/126347

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.