Main Vulnerability Database Vulnerabilities #VU124414

Protection mechanism failure in Apple iOS and iPadOS - CVE-2025-43534

Published: March 25, 2026

Vulnerability identifier: #VU124414

CSH Severity: Low

CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-43534

CWE-ID: CWE-693

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an attacker to bypass Activation Lock.

The vulnerability exists due to insufficient implementation of security measures in iTunes Store. An attacker with physical access to device can bypass Activation Lock.

Affected software

Apple iOS
iPadOS

How to mitigate CVE-2025-43534

Install updates from vendor's website.

Apple iOS - addressed in versions 18.7.7 22H333, 26.2 23C55
iPadOS - addressed in versions 18.7.7 22H333, 26.2 23C55

External References

https://support.apple.com/en-us/126793

Related Security Bulletins