PT-2025-44889 · Apple+7 · Ipados+9

Phil Beauvoir · Published 2025-11-03 · Updated 2026-01-20 · CVE-2025-43458

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2

Description Processing maliciously crafted web content may lead to an unexpected process crash due to improper state management.

Recommendations Update to iOS version 18.7.2. Update to iPadOS version 18.7.2.

Fix

DoS

RCE

Weakness Enumeration

CWE-703

CWE-20

Related Identifiers

ALSA-2025:22789

ALSA-2025:22790

BDU:2026-03307

CVE-2025-43458

DLA-4399-1

DSA-6074-1

MGASA-2025-0325

OPENSUSE-SU-2026:20065-1

SUSE-SU-2025:4416-1

SUSE-SU-2025:4423-1

SUSE-SU-2026:0021-1

SUSE-SU-2026:20102-1

USN-7941-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Apple Macos

Red Hat

Rocky Linux

Ubuntu

Ios

Ipados

References · 146

• https://osv.dev/vulnerability/CVE-2025-43458 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:22790 · Vendor Advisory
• https://support.apple.com/en-us/125637 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0325.html · Security Note
• https://errata.almalinux.org/8/ALSA-2025-22789.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43458 · Security Note
• https://errata.rockylinux.org/RLSA-2025:22789 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-22789.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-43458 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-43458 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43458 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:22790 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-66287 · Vendor Advisory