« List of all CVEs

CVE-2025-43343

Published: 9/15/2025 Last updated: 11/4/2025 Reserved: 4/16/2025

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

CNA assigner: apple (286789f9-fbc2-4510-9f9a-43facdede74c) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 9.8 Critical CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Opam packages affected (1)

javascriptcore

Products affected (9)

Product Vendor Version
iOS and iPadOS Apple 21.13.17
tvOS Apple 6.9.5
visionOS Apple < 68.0.2
watchOS Apple < 15.5
iOS and iPadOS Apple n/a
Safari Apple 6.9
tvOS Apple < 10.0.19045.2728
visionOS Apple FastConnect 6200
watchOS Apple >=15.2, <15.2.4

References (20)