PT-2025-51893 · Apple+7 · Ipados+12
Hossein Lotfi
+1
·
Published
2025-12-12
·
Updated
2026-01-20
·
CVE-2025-43541
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Apple Safari versions prior to 26.2
iOS versions prior to 18.7.3
iPadOS versions prior to 18.7.3
macOS Tahoe versions prior to 26.2
visionOS versions prior to 26.2
webkit2gtk3 (affected versions not specified)
wpewebkit (affected versions not specified)
webkit2gtk (affected versions not specified)
Description
The software contains a type confusion issue stemming from improper state handling when processing web content. This can lead to an unexpected crash of the application. The issue is related to the handling of the
byteLength property within the JavaScriptCore FTL DataView component.Recommendations
Update Apple Safari to version 26.2 or later.
Update iOS to version 18.7.3 or later.
Update iPadOS to version 18.7.3 or later.
Update macOS Tahoe to version 26.2 or later.
Update visionOS to version 26.2 or later.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. for webkit2gtk3, wpewebkit and webkit2gtk.
RCE
DoS
Type Confusion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Linuxmint
Apple Macos
Red Hat
Rocky Linux
Safari
Ubuntu
Ios
Ipados
Macos Tahoe
Visionos