CVE-2025-43537
Medium · 5.5CVSS
5.5
EPSS
0.5%
Published
Feb 11, 2026
CISA due date
—
The record
A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2. Restoring a maliciously crafted backup file may lead to modification of protected system files.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|