CVE-2025-43226 is an out-of-bounds read vulnerability that was addressed by improved input validation in various Apple operating systems. Processing a maliciously crafted image could lead to disclosure of process memory. The issue is fixed in watchOS 11.6, iOS 18.6, iPadOS 18.6 and 17.7.9, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, and visionOS 2.6.