Memory Management Flaw in Safari and Apple Operating Systems
CVE-2025-43434

4.3MEDIUM

Key Information:

Vendor: Apple
Status: Safari; Visionos; Watch OS; iOS And iPad OS
Vendor: CVE Published:; 4 November 2025

What is CVE-2025-43434?

A memory management flaw identified in Safari and various Apple operating systems can be exploited through maliciously crafted web content. This vulnerability may result in an unexpected crash of the Safari browser, impacting user experience and security. Thankfully, this issue has been addressed in the latest updates for watchOS, iOS, iPadOS, Safari, and visionOS, enhancing the overall security posture of Apple products.

Affected Version(s)

iOS and iPadOS < 26.1

Safari < 26.1

visionOS < 26.1

References

https://support.apple.com/en-us/125640

https://support.apple.com/en-us/125638

https://support.apple.com/en-us/125639

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 4, 2025
Vulnerability Reserved
Apr 16, 2025

JSON