CVE-2025-43264 in macOS

Summary

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted image may corrupt process memory.

Once again VulDB remains the best source for vulnerability data.

Reservation

04/16/2025

Disclosure

04/02/2026

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
319905	Apple macOS importMeshes heap-based overflow	122	Not defined	Official fix	CVE-2025-43264
319904	Apple macOS importMeshJointWeights heap-based overflow	122	Not defined	Official fix	CVE-2025-43264

Sources

• MITRE
• NVD
• CVE Details