Paper/Archive/CVE-2025-43343

CVE-2025-43343

Apple Safari — The issue was addressed with improved memory handling.

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 56.7.567 × 2011.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

Affected

ProductAffectedFixed inSource

Safari< 2626CNA

iOS and iPadOS< 2626CNA

macOS< 2626CNA

tvOS< 2626CNA

visionOS< 2626CNA

watchOS< 2626CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/125108 refsupport.apple.com/en-us/125110 refsupport.apple.com/en-us/125113 refsupport.apple.com/en-us/125114 refsupport.apple.com/en-us/125115 refsupport.apple.com/en-us/125116 refseclists.org/fulldisclosure/2025/Sep/57 refseclists.org/fulldisclosure/2025/Sep/53 refseclists.org/fulldisclosure/2025/Sep/59 refseclists.org/fulldisclosure/2025/Sep/49 refopenwall.com/lists/oss-security/2025/10/13/4 refaccess.redhat.com/errata/RHSA-2025:19946 refubuntu.com/security/CVE-2025-43343 refsecurity-tracker.debian.org/tracker/CVE-2025-43343 refwebkitgtk.org/security/WSA-2025-0007.html