PT-2025-44888

CVE-2025-43457

·

Published

2025-09-18

·

Updated

2026-06-30

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 26.1 watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 visionOS versions prior to 26.1
Description A use-after-free issue exists due to improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash. The issue involves Array allocation sinking in DFG.
Recommendations Update Apple Safari to version 26.1. Update watchOS to version 26.1. Update iOS to version 26.1. Update iPadOS to version 26.1. Update visionOS to version 26.1.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2026:10702
ALSA-2026:19206
ALSA-2026:9692
BIT-JAVA-2025-43457
BIT-JAVA-MIN-2025-43457
BIT-JRE-2025-43457
MGASA-2026-0064
OPENSUSE-SU-2026:20518-1
RHSA-2026:10702
RHSA-2026:11329
RHSA-2026:11814
RHSA-2026:13845
RHSA-2026:14659
RHSA-2026:9692
SUSE-SU-2026:1139-1
SUSE-SU-2026:1150-1
SUSE-SU-2026:1364-1
SUSE-SU-2026:21180-1
USN-8237-1
ZDI-25-1010
Found an issue in the description? Have something to add? Feel free to write us 👾