CVE-2025-43505

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Nov 4, 2025

CISA due date

—

The record

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption.

Affected packages

Ecosystem	Package	Introduced	Fixed