Memory Handling Issue in Safari and Apple Products
CVE-2025-43535

4.3MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Safari
Visionos
Mac OS
Vendor
CVE Published:
17 December 2025

What is CVE-2025-43535?

A memory handling vulnerability in Safari and various Apple operating systems could allow an attacker to exploit maliciously crafted web content, leading to unexpected process crashes. This vulnerability is fixed in the latest versions of Safari, iOS, iPadOS, macOS Tahoe, and visionOS. Users are advised to update their devices to ensure protection against potential exploits.

Affected Version(s)

iOS and iPadOS < 18.7

iOS and iPadOS < 26.2

macOS < 26.2

References

https://support.apple.com/en-us/125885
https://support.apple.com/en-us/125892
https://support.apple.com/en-us/125884

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-43535 : Memory Handling Issue in Safari and Apple Products