CVE-2025-43501

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/125884	Release Notes Vendor Advisory
https://support.apple.com/en-us/125885	Release Notes Vendor Advisory
https://support.apple.com/en-us/125886	Release Notes Vendor Advisory
https://support.apple.com/en-us/125891	Release Notes Vendor Advisory
https://support.apple.com/en-us/125892	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apple:safari::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:visionos::::::::

History

30 Sep 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Se abordó un problema de desbordamiento de búfer con una gestión de memoria mejorada. Este problema se corrigió en Safari 26.2, iOS 18.7.3 y iPadOS 18.7.3, iOS 26.2 y iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. El procesamiento de contenido web creado con fines maliciosos puede provocar un cierre inesperado del proceso.

Information

Published : 2025-12-17 21:16

Updated : 2026-10-07 11:10

NVD link : CVE-2025-43501

Mitre link : CVE-2025-43501

CVE.ORG link : CVE-2025-43501

JSON object : View

Products Affected

apple

macos
iphone_os
ipados
safari
visionos

CWE

CWE-787

Out-of-bounds Write

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-2025-43501", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-43501", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-19T04:55:32.311931Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "Safari", "versions": [{"status": "affected", "version": "0", "lessThan": "26.2", "versionType": "custom"}]}, {"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"status": "affected", "version": "0", "lessThan": "18.7.3", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "26.2", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"status": "affected", "version": "0", "lessThan": "26.2", "versionType": "custom"}]}, {"vendor": "Apple", "product": "visionOS", "versions": [{"status": "affected", "version": "0", "lessThan": "26.2", "versionType": "custom"}]}]}], "published": "2025-12-17T21:16:09.043", "references": [{"url": "https://support.apple.com/en-us/125884", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125885", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125886", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125891", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/125892", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash."}, {"lang": "es", "value": "Se abord\u00f3 un problema de desbordamiento de b\u00fafer con una gesti\u00f3n de memoria mejorada. Este problema se corrigi\u00f3 en Safari 26.2, iOS 18.7.3 y iPadOS 18.7.3, iOS 26.2 y iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. El procesamiento de contenido web creado con fines maliciosos puede provocar un cierre inesperado del proceso."}], "lastModified": "2026-10-07T11:10:00.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3ECBF838-536C-47F9-9876-C526B8ED32EC", "versionEndExcluding": "26.2"}, {"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6547722A-1226-4E23-B3AE-8692B07C2657", "versionEndExcluding": "18.7.3"}, {"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B71D919-1AA2-4F17-A834-4B703E36F7E2", "versionEndExcluding": "26.2", "versionStartIncluding": "26.0"}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8928A377-93BD-49AD-B4FE-5B2328EBDB70", "versionEndExcluding": "18.7.3"}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10FD01C3-D77F-4FE4-8195-F2C59FB1321C", "versionEndExcluding": "26.2", "versionStartIncluding": "26.0"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBA92B6D-E36C-432B-A041-94D81427CD75", "versionEndExcluding": "26.2"}, {"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB10D901-4800-4DF9-AB35-48017C178161", "versionEndExcluding": "26.2"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}