Out-of-Bounds Access Issue in Apple Safari Affecting Multiple Devices
CVE-2025-43209

9.8CRITICAL

Key Information:

Vendor

Apple

Status
Vendor
CVE Published:
30 July 2025

What is CVE-2025-43209?

An out-of-bounds access issue in Safari may result in unexpected crashes when processing maliciously manipulated web content. This vulnerability affects multiple Apple operating systems and raises significant concerns about browser security. Apple has addressed this issue with improved bounds checking in recent updates across various devices.

Affected Version(s)

iOS and iPadOS < 18.6

iPadOS < 17.7

macOS < 15.6

References

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.