CoreCVE
Back

HIGH

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

Published Dec 17, 2025

Description

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Affected products

Remediation

Red Hat statement

To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity. Additionally, this issue can cause an unexpected process crash but the possibility of remote code execution is not discarded.

Red Hat mitigation

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

Metrics

Weaknesses (1)

CWE-119

Buffer Overflow

References (10)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Dec 17, 2025
Updated Apr 2, 2026
Reserved Apr 16, 2025
Link CVE-2025-43535
CISA Vulnrichment
Updated Dec 17, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2025-43535
Red Hat
Severity Important
Public date Dec 17, 2025
Links CVE-2025-43535 - Bugzilla