PT-2025-51893
CVE-2025-43541
·
Published
2025-12-12
·
Updated
2026-09-30
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Apple Safari versions prior to 26.2
iOS versions prior to 18.7.3
iPadOS versions prior to 18.7.3
macOS Tahoe versions prior to 26.2
visionOS versions prior to 26.2
webkit2gtk3 (affected versions not specified)
wpewebkit (affected versions not specified)
webkit2gtk (affected versions not specified)
Description
The software contains a type confusion issue stemming from improper state handling when processing web content. This can lead to an unexpected crash of the application. The issue is related to the handling of the
byteLength property within the JavaScriptCore FTL DataView component.Recommendations
Update Apple Safari to version 26.2 or later.
Update iOS to version 18.7.3 or later.
Update iPadOS to version 18.7.3 or later.
Update macOS Tahoe to version 26.2 or later.
Update visionOS to version 26.2 or later.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. for webkit2gtk3, wpewebkit and webkit2gtk.
Found an issue in the description? Have something to add? Feel free to write us 👾