{
    "document": {
        "category": "csaf_security_advisory",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "nl",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            },
            {
                "category": "description",
                "text": "Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.",
                "title": "Feiten"
            },
            {
                "category": "description",
                "text": "De kwetsbaarheden omvatten verschillende problemen zoals ongeautoriseerde toegang tot gevoelige gebruikersdata, geheugenbeheerproblemen, en kwetsbaarheden die konden leiden tot denial-of-service of onverwachte applicatiecrashes. Deze kwetsbaarheden konden worden misbruikt door kwaadwillenden om toegang te krijgen tot privé-informatie of om de stabiliteit van de systemen in gevaar te brengen. De verbeteringen in de updates zijn cruciaal voor het waarborgen van de privacy en veiligheid van gebruikers binnen het Apple-ecosysteem.",
                "title": "Interpretaties"
            },
            {
                "category": "description",
                "text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
                "title": "Oplossingen"
            },
            {
                "category": "general",
                "text": "medium",
                "title": "Kans"
            },
            {
                "category": "general",
                "text": "medium",
                "title": "Schade"
            },
            {
                "category": "general",
                "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "title": "CWE-119"
            },
            {
                "category": "general",
                "text": "Numeric Truncation Error",
                "title": "CWE-197"
            },
            {
                "category": "general",
                "text": "Exposure of Sensitive Information to an Unauthorized Actor",
                "title": "CWE-200"
            },
            {
                "category": "general",
                "text": "CWE-275",
                "title": "CWE-275"
            },
            {
                "category": "general",
                "text": "Use After Free",
                "title": "CWE-416"
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "Nationaal Cyber Security Centrum",
            "namespace": "https://www.ncsc.nl/"
        },
        "references": [
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://support.apple.com/en-us/125108"
            },
            {
                "category": "external",
                "summary": "Reference",
                "url": "https://support.apple.com/en-us/125109"
            }
        ],
        "title": "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
        "tracking": {
            "current_release_date": "2025-09-16T11:17:27.365694Z",
            "generator": {
                "date": "2025-08-04T16:30:00Z",
                "engine": {
                    "name": "V.A.",
                    "version": "1.3"
                }
            },
            "id": "NCSC-2025-0291",
            "initial_release_date": "2025-09-16T11:17:27.365694Z",
            "revision_history": [
                {
                    "date": "2025-09-16T11:17:27.365694Z",
                    "number": "1.0.0",
                    "summary": "Initiele versie"
                }
            ],
            "status": "final",
            "version": "1.0.0"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/*",
                                "product": {
                                    "name": "vers:unknown/*",
                                    "product_id": "CSAFPID-1"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "iOS"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/*",
                                "product": {
                                    "name": "vers:unknown/*",
                                    "product_id": "CSAFPID-2"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "iPadOS"
                    }
                ],
                "category": "vendor",
                "name": "Apple"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2025-6965",
            "cwe": {
                "id": "CWE-197",
                "name": "Numeric Truncation Error"
            },
            "notes": [
                {
                    "category": "other",
                    "text": "Numeric Truncation Error",
                    "title": "CWE-197"
                },
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-6965 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-6965.json"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                        "baseScore": 9.8,
                        "baseSeverity": "CRITICAL"
                    },
                    "products": [
                        "CSAFPID-1",
                        "CSAFPID-2"
                    ]
                }
            ],
            "title": "CVE-2025-6965"
        },
        {
            "cve": "CVE-2025-24133",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-24133 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-24133.json"
                }
            ],
            "title": "CVE-2025-24133"
        },
        {
            "cve": "CVE-2025-30468",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-30468 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-30468.json"
                }
            ],
            "title": "CVE-2025-30468"
        },
        {
            "cve": "CVE-2025-31254",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-31254 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31254.json"
                }
            ],
            "title": "CVE-2025-31254"
        },
        {
            "cve": "CVE-2025-31255",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-31255 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-31255.json"
                }
            ],
            "title": "CVE-2025-31255"
        },
        {
            "cve": "CVE-2025-43190",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43190 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43190.json"
                }
            ],
            "title": "CVE-2025-43190"
        },
        {
            "cve": "CVE-2025-43203",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43203 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43203.json"
                }
            ],
            "title": "CVE-2025-43203"
        },
        {
            "cve": "CVE-2025-43272",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43272 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43272.json"
                }
            ],
            "title": "CVE-2025-43272"
        },
        {
            "cve": "CVE-2025-43295",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43295 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43295.json"
                }
            ],
            "title": "CVE-2025-43295"
        },
        {
            "cve": "CVE-2025-43299",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43299 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43299.json"
                }
            ],
            "title": "CVE-2025-43299"
        },
        {
            "cve": "CVE-2025-43302",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43302 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43302.json"
                }
            ],
            "title": "CVE-2025-43302"
        },
        {
            "cve": "CVE-2025-43303",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43303 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43303.json"
                }
            ],
            "title": "CVE-2025-43303"
        },
        {
            "cve": "CVE-2025-43317",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43317 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43317.json"
                }
            ],
            "title": "CVE-2025-43317"
        },
        {
            "cve": "CVE-2025-43329",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43329 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43329.json"
                }
            ],
            "title": "CVE-2025-43329"
        },
        {
            "cve": "CVE-2025-43342",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43342 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43342.json"
                }
            ],
            "title": "CVE-2025-43342"
        },
        {
            "cve": "CVE-2025-43343",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43343 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43343.json"
                }
            ],
            "title": "CVE-2025-43343"
        },
        {
            "cve": "CVE-2025-43344",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43344 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43344.json"
                }
            ],
            "title": "CVE-2025-43344"
        },
        {
            "cve": "CVE-2025-43346",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43346 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43346.json"
                }
            ],
            "title": "CVE-2025-43346"
        },
        {
            "cve": "CVE-2025-43347",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43347 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43347.json"
                }
            ],
            "title": "CVE-2025-43347"
        },
        {
            "cve": "CVE-2025-43349",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43349 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43349.json"
                }
            ],
            "title": "CVE-2025-43349"
        },
        {
            "cve": "CVE-2025-43354",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43354 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43354.json"
                }
            ],
            "title": "CVE-2025-43354"
        },
        {
            "cve": "CVE-2025-43355",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43355 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43355.json"
                }
            ],
            "title": "CVE-2025-43355"
        },
        {
            "cve": "CVE-2025-43356",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43356 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43356.json"
                }
            ],
            "title": "CVE-2025-43356"
        },
        {
            "cve": "CVE-2025-43357",
            "notes": [
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43357 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43357.json"
                }
            ],
            "title": "CVE-2025-43357"
        },
        {
            "cve": "CVE-2025-43358",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43358 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43358.json"
                }
            ],
            "title": "CVE-2025-43358"
        },
        {
            "cve": "CVE-2025-43359",
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43359 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43359.json"
                }
            ],
            "title": "CVE-2025-43359"
        },
        {
            "cve": "CVE-2025-43362",
            "notes": [
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43362 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43362.json"
                }
            ],
            "title": "CVE-2025-43362"
        },
        {
            "cve": "CVE-2025-43368",
            "notes": [
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43368 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43368.json"
                }
            ],
            "title": "CVE-2025-43368"
        },
        {
            "cve": "CVE-2025-43372",
            "notes": [
                {
                    "category": "general",
                    "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
                    "title": "CVSSV4"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-1",
                    "CSAFPID-2"
                ]
            },
            "references": [
                {
                    "category": "self",
                    "summary": "CVE-2025-43372 | NCSC-NL Website",
                    "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-43372.json"
                }
            ],
            "title": "CVE-2025-43372"
        }
    ]
}