PT-2025-51905 · Apple+7 · Ipados+12

Eternalsakura13 + 1 · Published 2025-12-12 · Updated 2026-01-20 · CVE-2025-43535

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.2 iOS versions prior to 18.7.3 iPadOS versions prior to 18.7.3 macOS Tahoe versions prior to 26.2 visionOS versions prior to 26.2

Description A flaw exists due to improper memory handling when processing specially designed web content. This can result in an unexpected application crash.

Recommendations Update Safari to version 26.2. Update iOS to version 18.7.3. Update iPadOS to version 18.7.3. Update macOS Tahoe to version 26.2. Update visionOS to version 26.2.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALSA-2025:23663

ALSA-2025:23700

BDU:2025-16339

CVE-2025-43535

DLA-4414-1

DSA-6083-1

MGASA-2025-0331

OPENSUSE-SU-2026:20065-1

SUSE-SU-2025:4527-1

SUSE-SU-2025:4528-1

SUSE-SU-2026:0021-1

SUSE-SU-2026:20102-1

USN-7957-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Apple Macos

Red Hat

Rocky Linux

Safari

Ubuntu

Ios

Ipados

Macos Tahoe

Visionos

References · 125

• https://support.apple.com/en-us/125891 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:23700 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14174 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43535 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4528-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-43535 · Security Note
• https://ubuntu.com/security/CVE-2025-43529 · Vendor Advisory
• https://support.apple.com/en-us/125892 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43536 · Vendor Advisory
• https://support.apple.com/en-us/125885 · Vendor Advisory
• https://support.apple.com/en-us/125886 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43501 · Vendor Advisory
• https://support.apple.com/en-us/125884 · Vendor Advisory