---
id: CVE-2025-43280
title: The issue was resolved by not loading remote images
summary: >-
  The issue was resolved by not loading remote images. This issue is fixed in
  iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in
  Mail in Lockdown Mode.
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N'
cwe:
  - CWE-940
vendor: apple
product: ipados
affected:
  - ipados < 18.6
  - iphone_os < 18.6
patched:
  - ipados 18.6
  - iphone_os 18.6
published: '2025-10-15'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T11:10:00.250'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-43280'
references:
  - url: 'https://support.apple.com/en-us/124147'
    label: product-security@apple.com
tags:
  - nvd
epss: 0.00211
epssPercentile: 0.10395
ingestedAt: '2026-10-08T11:31:27.444Z'
---

## Overview

The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode.

## Affected

- `ipados < 18.6`
- `iphone_os < 18.6`

## Remediation

Upgrade past the affected range:

- `ipados 18.6`
- `iphone_os 18.6`