Back to the CVE list
CVE-2025-43300 CISA KEV · Actively exploited

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CVSS score

—

EPSS probability

%32.5

Risk score

—

Published

1 y ago

OverviewPublic Exploits (6)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
Dark-life944/CVE-2025
GitHub

This is POC for IOS 0click CVE-2025-43300

Public PoC
G
hunters-sec/CVE-2025-43300
GitHub

This is POC for IOS 0click CVE-2025-43300

Public PoC
G
JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201
GitHub

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, bypassing LockDown mode protection by exploiting ImageIO (CVE-2025-43300), then WebKit(CVE-2025-24201) and Core Media(CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking. Triggered via iMessage, it enables full compromise with no user interaction.

Public PoC
G
PwnToday/CVE-2025-43300
GitHub

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption

Public PoC
G
ticofookfook/CVE-2025-43300
GitHub

ticofookfook/CVE-2025-43300

Public PoC
G
veniversum/cve-2025-43300
GitHub

veniversum/cve-2025-43300

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-43300"