PT-2025-31298 · Apple+3 · Ios+10

Shandikri · Published 2025-06-10 · Updated 2026-05-19 · CVE-2025-43214

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Safari (affected versions not specified)

Description The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Recommendations Update to watchOS 11.6. Update to iOS 18.6. Update to iPadOS 18.6. Update to tvOS 18.6. Update to macOS Sequoia 15.6. Update to visionOS 2.6.

Fix

RCE

Buffer Overflow

Type Confusion

Weakness Enumeration

CWE-119

CWE-843

Related Identifiers

ALSA-2026:10702

ALSA-2026:19206

ALSA-2026:9692

BDU:2025-09500

CVE-2025-43214

OPENSUSE-SU-2026:20518-1

RHSA-2026:10702

RHSA-2026:11329

RHSA-2026:11814

RHSA-2026:13845

RHSA-2026:14659

RHSA-2026:9692

SUSE-SU-2026:1139-1

SUSE-SU-2026:1150-1

SUSE-SU-2026:1364-1

SUSE-SU-2026:21180-1

USN-8237-1

ZDI-25-709

Affected Products

Linuxmint

Apple Macos

Rocky Linux

Safari

Ubuntu

Ios

Ipados

Macos Sequoia

Tvos

Visionos

Watchos

References · 161

• https://ubuntu.com/security/CVE-2026-20644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20643 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-28871 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:9692 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21180-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20676 · Vendor Advisory
• https://support.apple.com/en-us/124153 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:10702 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-28859 · Vendor Advisory
• https://support.apple.com/en-us/124149 · Vendor Advisory
• https://support.apple.com/en-us/124147 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-9692.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1364-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-20664 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8237-1 · Vendor Advisory