The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/125108 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/125113 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/125114 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/125115 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/125116 | Release Notes Vendor Advisory |
| http://seclists.org/fulldisclosure/2025/Sep/49 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2025/Sep/53 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2025/Sep/57 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2025/Sep/59 | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2025/10/13/4 | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
20 Nov 2025, 17:40
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:* cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:* |
|
| First Time |
Webkitgtk webkitgtk
Webkitgtk Wpewebkit Wpewebkit wpe Webkit |
|
| References | () http://seclists.org/fulldisclosure/2025/Sep/49 - Mailing List, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2025/Sep/53 - Mailing List, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2025/Sep/57 - Mailing List, Third Party Advisory | |
| References | () http://seclists.org/fulldisclosure/2025/Sep/59 - Mailing List, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2025/10/13/4 - Mailing List, Third Party Advisory |
04 Nov 2025, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to an unexpected process crash. | |
| References |
|
|
Information
Published : 2025-09-15 23:15
Updated : 2025-11-20 17:40
NVD link : CVE-2025-43343
Mitre link : CVE-2025-43343
CVE.ORG link : CVE-2025-43343
JSON object : View
Products Affected
wpewebkit
- wpe_webkit
apple
- watchos
- visionos
- ipados
- iphone_os
- safari
- tvos
- macos
webkitgtk
- webkitgtk
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer