PT-2025-51893

CVE-2025-43541

·

Published

2025-12-12

·

Updated

2026-09-30

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 26.2 iOS versions prior to 18.7.3 iPadOS versions prior to 18.7.3 macOS Tahoe versions prior to 26.2 visionOS versions prior to 26.2 webkit2gtk3 (affected versions not specified) wpewebkit (affected versions not specified) webkit2gtk (affected versions not specified)
Description The software contains a type confusion issue stemming from improper state handling when processing web content. This can lead to an unexpected crash of the application. The issue is related to the handling of the byteLength property within the JavaScriptCore FTL DataView component.
Recommendations Update Apple Safari to version 26.2 or later. Update iOS to version 18.7.3 or later. Update iPadOS to version 18.7.3 or later. Update macOS Tahoe to version 26.2 or later. Update visionOS to version 26.2 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability. for webkit2gtk3, wpewebkit and webkit2gtk.
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025:23663
ALSA-2025:23700
DLA-4414-1
DSA-6083-1
OPENSUSE-SU-2026:20065-1
SUSE-SU-2025:4527-1
SUSE-SU-2025:4528-1
SUSE-SU-2026:0021-1
SUSE-SU-2026:20102-1
USN-7957-1
ZDI-25-1127
Found an issue in the description? Have something to add? Feel free to write us 👾