CVE-2025-43209_CVE-2025-43209

9.8 / 10

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sonoma 14.7.7, watchOS 11.6, visionOS 2.6, macOS Ventura 13.7.7. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Basic Information

ID CVE-2025-43209

Source apple

Published Jul 29, 2025 at 23:35

Modified Jul 30, 2025 at 18:07

Affected Product

Vendor Apple

Product iPadOS

Version unspecified

Affected Versions Apple iPadOS unspecified
Apple macOS unspecified
Apple tvOS unspecified
Apple visionOS unspecified
Apple watchOS unspecified
Apple macOS unspecified
Apple iOS and iPadOS unspecified
Apple macOS unspecified

CWE Classification

CWE-787

References

{
    "lastseen": "",
    "description": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sonoma 14.7.7, watchOS 11.6, visionOS 2.6, macOS Ventura 13.7.7. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
    "published": "2025-07-29T23:35:27.601Z",
    "modified": "2025-07-30T18:07:32.762Z",
    "type": "cve",
    "title": "CVE-2025-43209",
    "source": "apple",
    "references": "https://support.apple.com/en-us/124148\nhttps://support.apple.com/en-us/124149\nhttps://support.apple.com/en-us/124153\nhttps://support.apple.com/en-us/124154\nhttps://support.apple.com/en-us/124155\nhttps://support.apple.com/en-us/124150\nhttps://support.apple.com/en-us/124147\nhttps://support.apple.com/en-us/124151",
    "id": "CVE-2025-43209",
    "bulletinFamily": "",
    "cwe": [
        "CWE-787"
    ],
    "cvelist": null,
    "sourceData": "Apple iPadOS unspecified\nApple macOS unspecified\nApple tvOS unspecified\nApple visionOS unspecified\nApple watchOS unspecified\nApple macOS unspecified\nApple iOS and iPadOS unspecified\nApple macOS unspecified",
    "sourceHref": "",
    "cvss": {
        "score": 9.8,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "iPadOS",
    "version": "unspecified",
    "vendor": "Apple",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}