CVE-2025-43422

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1

Description A flaw exists in the Stolen Device Protection function of iOS and iPadOS due to insufficient protection of service data. Successful exploitation could allow an attacker to disable the Stolen Device Protection feature. This issue was addressed by adding additional logic. An attacker requires physical access to the device to exploit this issue.

Recommendations Update to iOS version 26.1 or later. Update to iPadOS version 26.1 or later.