Skip to main content
Mallory
CriticalCISA KEVExploited in the wildPublic exploit

Out-of-bounds write in Apple ImageIO when processing malicious image files

IdentifiersCVE-2025-43300CWE-787· Out-of-bounds Write

CVE-2025-43300 is an out-of-bounds write vulnerability in Apple’s ImageIO framework affecting iOS, iPadOS, and macOS. Apple states that processing a malicious image file may result in memory corruption and that the issue was fixed through improved bounds checking. Supporting reporting consistently places the flaw in ImageIO image parsing, with multiple references indicating DNG image handling as the likely attack surface; some reporting further points to the RawCamera library within ImageIO, although Apple’s advisory text only confirms ImageIO and does not publicly document the exact function. Apple is aware of reports that the vulnerability may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Share:
For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation can corrupt memory in the context of the process handling the malicious image. Depending on exploit reliability and chaining, this can lead to application crash, device compromise, and potentially arbitrary code execution. Reporting around in-the-wild exploitation indicates the flaw was used in targeted attacks and may have been chained with other vulnerabilities, including a WhatsApp linked-device synchronization issue, to support stealthy compromise of victim devices and downstream access to messaging sessions.

Mitigation

If you can’t patch tonight, do this now.

Until patching is complete, reduce exposure to untrusted image content and high-risk messaging workflows where attacker-controlled images may be automatically processed. For high-risk users, use the latest supported OS builds, minimize attack surface from messaging and content-preview features where operationally feasible, and follow platform hardening guidance such as Apple Lockdown Mode where appropriate. If compromise is suspected, perform incident response on the device and rotate sensitive sessions and credentials that may have been exposed through post-exploitation activity.

Remediation

Patch, then assume compromise.

Apply Apple’s security updates that address CVE-2025-43300. The content states the issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iPadOS 17.7.10, iOS 18.6.2 and iPadOS 18.6.2, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, and macOS Ventura 13.7.8. Organizations should prioritize patching exposed and high-risk devices, especially those used by likely surveillance targets.
PUBLIC EXPLOITS

Exploits

5 valid exploits after Mallory filtered fakes, detection scripts, and README-only repos (3 hidden).

VALID 5 / 8 TOTALView more in app
CVE-2025-43300MaturityPoCVerified exploit

This repository provides a Python-based interactive CLI tool (CVE-2025-43300.py) for analyzing and creating proof-of-concept (PoC) files targeting CVE-2025-43300, a critical memory corruption vulnerability in Apple's image processing framework (affecting iOS 18.6.1 and macOS). The exploit leverages a mismatch between the TIFF SamplesPerPixel metadata and the JPEG Lossless SOF3 component count within DNG files, causing a buffer overflow when the file is processed by the vulnerable system. The tool offers features to analyze DNG files for vulnerability indicators, create crafted PoC files by modifying specific bytes, perform binary diffs, and safely patch DNG files. The README provides detailed technical background, attack scenarios (including zero-click vectors such as email, AirDrop, and web downloads), and mitigation advice. The main attack vector is the delivery of a malicious DNG file to a target system, which, when processed, can result in application crash or code execution. The repository is structured with a single main Python script and a README, and does not rely on any exploit framework.

7amzahardDisclosed Dec 2, 2025pythonmarkdownlocalnetwork
CVE-2025-43300MaturityPoCVerified exploit

This repository demonstrates a proof-of-concept (POC) exploit for CVE-2025-43300, a buffer overflow vulnerability in DNG (Digital Negative) file parsers. The vulnerability arises from a mismatch between the TIFF metadata (SamplesPerPixel) and the embedded JPEG data (SOF0 Components) within a DNG file. The exploit consists of a JavaScript script ('create-dng_poc_exec.js') that programmatically generates a DNG file ('exploit.dng') with the malicious structure: the TIFF header claims there are 2 components, while the JPEG data actually contains 3. When a vulnerable parser processes this file, it allocates a buffer for 2 components but processes 3, resulting in a buffer overflow and potential remote code execution. The repository includes a detailed README.md explaining the vulnerability, file structure, and exploitation steps. There are no network endpoints or remote services involved; the attack vector is a crafted file intended to be opened by a vulnerable application.

ticofookfookDisclosed Sep 30, 2025javascriptfile
CVE-2025MaturityPoCVerified exploit

This repository provides a proof-of-concept (POC) toolkit for CVE-2025-43300, a critical memory corruption vulnerability in Apple's image processing framework affecting iOS 18.6.1 and certain macOS versions. The vulnerability is triggered by a crafted DNG (Digital Negative) image file with inconsistent metadata: the TIFF SamplesPerPixel tag is set to a different value than the JPEG Lossless SOF3 component count. This mismatch causes the image parser to allocate a buffer of incorrect size, leading to a buffer overflow when the JPEG decoder writes more data than expected. The repository contains two main Python scripts: - `dng_vulnerability_analyzer.py`: Analyzes DNG files to locate relevant metadata and JPEG stream markers, identifies vulnerability conditions, and reports exact byte offsets for modification. - `hex_modifier.py`: Safely modifies specific bytes in a DNG file to create a vulnerable sample (POC), verifies changes, and generates binary diff reports. The typical workflow is to analyze a target DNG file, use the analyzer to find the correct offsets, then use the modifier to create a POC file with the required metadata/stream inconsistency. The crafted file can then be delivered to a target system via email, AirDrop, messaging, or web download. On vulnerable systems, simply previewing or importing the file can trigger the exploit, resulting in a crash or potential code execution. The README provides detailed technical background, usage instructions, and safe testing guidelines. No network endpoints or remote services are hardcoded; the exploit is file-based and targets local or network-delivered DNG files.

Dark-life944Disclosed Sep 30, 2025pythonmarkdownnetworklocal
CVE-2025-43300MaturityPoCVerified exploit

This repository provides a proof-of-concept (POC) exploit for CVE-2025-43300, a memory corruption vulnerability in Apple's RawCamera.bundle image processing component affecting iOS 18.6.1 and macOS. The exploit leverages a mismatch between TIFF metadata (SamplesPerPixel) and JPEG Lossless parameters (SOF3 component count) in DNG files, causing a buffer overflow when the file is processed automatically by the target system (e.g., via Airdrop, import, or preview). The repository contains two files: a README.md with detailed vulnerability and exploitation instructions, and hex_modifier.py, a Python script that automates the creation of malicious DNG files by modifying specific byte offsets. The script supports creating a POC file, manual byte modification, and generating binary diff reports. The exploit is zero-click and file-based, requiring only that the target device processes the crafted DNG file. No network endpoints or remote services are involved; the attack is delivered via file transfer or similar mechanisms. The code is a POC and does not include a weaponized payload, but demonstrates the vulnerability's impact and provides tooling for further research.

PwnTodayDisclosed Sep 9, 2025pythonzero-click (file-based, automatic processing)
CVE-2025-43300MaturityPoCVerified exploit

This repository provides a proof-of-concept (POC) toolkit for CVE-2025-43300, a critical memory corruption vulnerability in Apple's image processing framework affecting iOS 18.6.1 and certain macOS versions. The vulnerability is triggered by a crafted DNG (Digital Negative) image file with inconsistent metadata: the TIFF SamplesPerPixel tag and the JPEG Lossless SOF3 component count are deliberately set to different values, causing a buffer overflow during automatic image processing. The repository contains two main Python scripts: - `dng_vulnerability_analyzer.py`: Analyzes DNG files to locate relevant metadata and JPEG stream markers, identifies vulnerability conditions, and reports exact byte offsets for modification. - `hex_modifier.py`: Safely modifies DNG files at specified offsets to create a POC file that triggers the vulnerability, verifies changes, and generates binary diff reports. The typical workflow is to analyze a DNG file to find the correct offsets, use the modifier to create a vulnerable sample, and then verify the result. The exploit is zero-click: simply delivering the crafted DNG file to a vulnerable device (via email, AirDrop, messaging, or web download) can trigger the bug when the file is processed, potentially leading to a crash or code execution. The repository is well-documented, with a comprehensive README explaining the vulnerability, technical details, usage instructions, and safe testing guidelines. No network endpoints or IP addresses are hardcoded; all operations are performed on local DNG files provided by the user.

hunters-secDisclosed Aug 24, 2025pythonnetworklocal
EXPOSURE SURFACE

Affected products & vendors

Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.

VendorProductType
AppleIpadosoperating_system
AppleIphone Osoperating_system
AppleMacosoperating_system

Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.
Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware4

Malware families riding this exploit, with evidence and IOCs.

Detection signatures3

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity170

Community discussion across Reddit, Mastodon, and other social sources.