PT-2025-44877 · Apple+7 · Ipados+9

Published 2025-11-03 · Updated 2026-03-30 · CVE-2025-43443

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2

Description Processing maliciously crafted web content may lead to an unexpected process crash.

Recommendations Update to iOS version 18.7.2. Update to iPadOS version 18.7.2.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

ALSA-2025:22789

ALSA-2025:22790

BDU:2026-03305

CVE-2025-43443

DLA-4394-1

DSA-6070-1

MGASA-2025-0319

OPENSUSE-SU-2026:20065-1

SUSE-SU-2025:4416-1

SUSE-SU-2025:4423-1

SUSE-SU-2026:0021-1

SUSE-SU-2026:1139-1

SUSE-SU-2026:1150-1

SUSE-SU-2026:20102-1

USN-7914-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Apple Macos

Red Hat

Rocky Linux

Ubuntu

Ios

Ipados

References · 194

• https://ubuntu.com/security/notices/USN-7914-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:22790 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4394-1 · Vendor Advisory
• https://support.apple.com/en-us/125637 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2025-22789.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:22789 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-43443 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-22789.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43432 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0319 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:22790 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43425 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-43443 · Security Note