CVE-2025-43280

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-43280", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "state": "PUBLISHED", "assignerShortName": "apple", "dateReserved": "2025-04-16T15:24:37.101Z", "datePublished": "2025-10-15T20:00:47.792Z", "dateUpdated": "2026-08-05T14:24:36.975Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "Forwarding an email could display remote images in Mail in Lockdown Mode"}]}], "affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"version": "0", "status": "affected", "lessThan": "18.6", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode."}], "references": [{"url": "https://support.apple.com/en-us/124147"}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2026-04-02T18:09:56.959Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-940", "lang": "en", "description": "CWE-940 Improper Verification of Source of a Communication Channel"}]}], "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-10-16T13:44:46.545743Z", "id": "CVE-2025-43280", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-05T14:24:36.975Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-43280", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-16T13:44:46.545743Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-940", "description": "CWE-940 Improper Verification of Source of a Communication Channel"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-16T13:46:14.385Z"}}], "cna": {"affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "0", "lessThan": "18.6", "versionType": "custom"}]}], "references": [{"url": "https://support.apple.com/en-us/124147"}], "descriptions": [{"lang": "en", "value": "The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Forwarding an email could display remote images in Mail in Lockdown Mode"}]}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2026-04-02T18:09:56.959Z"}}}, "cveMetadata": {"cveId": "CVE-2025-43280", "state": "PUBLISHED", "dateUpdated": "2026-08-05T14:24:36.975Z", "dateReserved": "2025-04-16T15:24:37.101Z", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "datePublished": "2025-10-15T20:00:47.792Z", "assignerShortName": "apple"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "iOS and iPadOS", "vendor": "Apple", "versions": [{"lessThan": "18.6", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "product-security@apple.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "matchCriteriaId": "8ED4015E-C707-4A91-86B3-23100E0DFA8F", "versionEndExcluding": "18.6", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD9D42A7-DE2A-4D5A-8C7B-002A60148483", "versionEndExcluding": "18.6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode."}, {"lang": "es", "value": "El problema se resolvi\u00f3 al no cargar im\u00e1genes remotas. Este problema est\u00e1 solucionado en iOS 18.6 y iPadOS 18.6. Reenviar un correo electr\u00f3nico podr\u00eda mostrar im\u00e1genes remotas en Mail en Modo de Aislamiento."}], "id": "CVE-2025-43280", "lastModified": "2026-10-08T11:10:00.250", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43280", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-16T13:44:46.545743Z", "version": "2.0.3"}}]}, "published": "2025-10-15T20:15:34.893", "references": [{"source": "product-security@apple.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.apple.com/en-us/124147"}], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-940"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-27T23:40:44.446494+00:00", "value": {"mitigation_remediation": ["Upgrade the device to iOS\u202f18.6 or iPadOS\u202f18.6 to apply the vendor\u2011issued fix.", "Configure Mail to block remote images when downloading or displaying emails, especially in Lockdown Mode.", "Verify that email forwarding in Lockdown Mode does not embed remote image requests or observe any anomalous external traffic."], "summary": {"action": "Apply OS Update", "impact": "Information exposure via remote image loading in Mail on iOS/iPadOS Lockdown Mode"}, "threat_synthesis": {"affected_systems": "Apple iOS and iPadOS devices running versions earlier than 18.6. The issue is fixed in iOS\u202f18.6 and iPadOS\u202f18.6. Mail is the specific application affected, and only the Lockdown Mode context allows the vulnerability to be exercised.", "description_and_impact": "Mail can display remote images when forwarding an email while the device is in Lockdown Mode, potentially exposing sensitive information or unintended content to the recipient. The vulnerability stems from the system\u2019s behavior of rendering remote image content without user consent, which could be exploited to harvest data about the device or its user, and in some contexts could lead to malicious code execution via crafted image payloads. The weakness is described as a failure to sanitize or block remote image requests, aligned with CWE\u2011940.", "risk_and_exploitability": "The CVSS score is 4.7, indicating a medium severity. The EPSS score is below 1\u202f%, suggesting very low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog, and no active exploit is reported. Attackers would need to convince a user to forward an email while the device is in Lockdown Mode; consent or local user action is typically required, making exploitation less likely but still possible through social engineering."}}}}, "created": "2025-10-20T13:25:23.444057+00:00", "title": "Mail Remote Image Exposure in Lockdown Mode", "updated": "2026-04-27T23:45:15.892690+00:00", "vendors": ["apple", "apple$PRODUCT$ios", "apple$PRODUCT$ipad_os"]}