Product:
tvOS, Safari, visionOS, watchOS, macOS Tahoe, iOS, iPadOS
Summary
The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. This issue is fixed in the latest versions of the affected products.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-43343 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected software, can lead to a crash of the process. This can be done remotely over a network, requiring no user interaction or special privileges, making it a critical risk.
Affected Products
- tvOS: Affected by memory handling issues leading to crashes.
- Safari: Vulnerable to crafted web content causing unexpected behavior.
- visionOS: Experiences similar memory handling vulnerabilities.
- watchOS: Can be impacted by malicious web content.
- macOS Tahoe: Affected by the same memory handling issues.
- iOS: Vulnerable to crashes from crafted web content.
- iPadOS: Also experiences the same vulnerabilities as iOS.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected products. Apple has released fixes that improve memory handling and address the issue, ensuring that the risk of exploitation is minimized.