CVE-2025-46299_CVE-2025-46299

4.3 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari 26.2, watchOS 26.2, visionOS 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may disclose internal states of the app.

Basic Information

ID CVE-2025-46299

Source apple

Published Jan 9, 2026 at 21:15

Modified Jan 9, 2026 at 22:03

Affected Product

Vendor Apple

Product tvOS

Version unspecified

Affected Versions Apple tvOS unspecified
Apple Safari unspecified
Apple iOS and iPadOS unspecified
Apple visionOS unspecified
Apple macOS unspecified
Apple watchOS unspecified

CWE Classification

CWE-284

References

{
    "lastseen": "",
    "description": "A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari 26.2, watchOS 26.2, visionOS 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may disclose internal states of the app.",
    "published": "2026-01-09T21:15:50.158Z",
    "modified": "2026-01-09T22:03:08.142Z",
    "type": "cve",
    "title": "CVE-2025-46299",
    "source": "apple",
    "references": "https://support.apple.com/en-us/125889\nhttps://support.apple.com/en-us/125892\nhttps://support.apple.com/en-us/125884\nhttps://support.apple.com/en-us/125891\nhttps://support.apple.com/en-us/125886\nhttps://support.apple.com/en-us/125890",
    "id": "CVE-2025-46299",
    "bulletinFamily": "",
    "cwe": [
        "CWE-284"
    ],
    "cvelist": null,
    "sourceData": "Apple tvOS unspecified\nApple Safari unspecified\nApple iOS and iPadOS unspecified\nApple visionOS unspecified\nApple macOS unspecified\nApple watchOS unspecified",
    "sourceHref": "",
    "cvss": {
        "score": 4.3,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "tvOS",
    "version": "unspecified",
    "vendor": "Apple",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}