PT-2025-51906 · Apple+7 · Ipados+10

Eternalsakura13 + 1 · Published 2025-12-12 · Updated 2026-01-20 · CVE-2025-43536

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.2 iOS versions prior to 18.7.3 iPadOS versions prior to 18.7.3 Safari versions prior to 26.2

Description A memory management flaw exists due to a use-after-free condition. Processing specially designed web content could cause the application to crash unexpectedly.

Recommendations Update macOS to version Tahoe 26.2. Update iOS to version 18.7.3. Update iPadOS to version 18.7.3. Update Safari to version 26.2.

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025:23663

ALSA-2025:23700

BDU:2025-16338

CVE-2025-43536

DLA-4414-1

DSA-6083-1

MGASA-2025-0331

OPENSUSE-SU-2026:20065-1

SUSE-SU-2025:4527-1

SUSE-SU-2025:4528-1

SUSE-SU-2026:0021-1

SUSE-SU-2026:20102-1

USN-7957-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Apple Macos

Red Hat

Rocky Linux

Safari

Ubuntu

Ios

Ipados

References · 124

• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-43536 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2025:23700 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14174 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4528-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43536 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43529 · Vendor Advisory
• https://support.apple.com/en-us/125892 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43536 · Vendor Advisory
• https://support.apple.com/en-us/125885 · Vendor Advisory
• https://support.apple.com/en-us/125886 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16338 · Security Note
• https://ubuntu.com/security/CVE-2025-43501 · Vendor Advisory
• https://support.apple.com/en-us/125884 · Vendor Advisory