PT-2025-44866 · Apple+7 · Ipados+9

Google Big Sleep · Published 2025-11-03 · Updated 2026-01-20 · CVE-2025-43431

Positive Technologies · (AI Summary)

CVSS v2.0

10

High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2

Description A flaw exists due to improper memory handling when processing specially designed web content. This could result in memory corruption.

Recommendations Update to iOS version 18.7.2. Update to iPadOS version 18.7.2.

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

ALSA-2025:22789

ALSA-2025:22790

BDU:2026-03300

CVE-2025-43431

DLA-4394-1

DSA-6070-1

MGASA-2025-0319

OPENSUSE-SU-2026:20065-1

SUSE-SU-2025:4416-1

SUSE-SU-2025:4423-1

SUSE-SU-2026:0021-1

SUSE-SU-2026:20102-1

USN-7914-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Apple Macos

Red Hat

Rocky Linux

Ubuntu

Ios

Ipados

References · 153

• https://support.apple.com/en-us/125637 · Vendor Advisory
• https://support.apple.com/en-us/125638 · Vendor Advisory
• https://support.apple.com/en-us/125632 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:22789 · Vendor Advisory
• https://support.apple.com/en-us/125640 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43429 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0021-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43430 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43432 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-22790.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43431 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/726129 · Security Note
• https://ubuntu.com/security/CVE-2025-43392 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43431 · Security Note