CVE-2025-43214 is a vulnerability in Apple Safari caused by improper memory handling when processing maliciously crafted web content, which may lead to an unexpected crash of the browser. This issue affects Safari versions prior to 18.6 and has been fixed in Safari 18.6 and corresponding OS updates (iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6). The CVSS v3.1 base score is 6.5, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impact limited to availability (crash). Red Hat has released patches for webkitgtk4 addressing this and related vulnerabilities in their Extended Lifecycle Support 7 products. No known exploits are currently reported in the wild.

Successful exploitation of this vulnerability may cause Safari to crash unexpectedly when processing malicious web content, resulting in denial of service for the user. There is no indication of confidentiality or integrity impact. The vulnerability affects multiple Apple platforms and also the webkitgtk4 package used in Red Hat Enterprise Linux 7 Extended Lifecycle Support. No known active exploits have been reported.

A fix is available and has been released by Apple in Safari 18.6 and corresponding OS updates (iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6). Users and administrators should update to these versions to remediate the vulnerability. Red Hat has also issued security advisories and patches for webkitgtk4 in RHEL 7 Extended Lifecycle Support; applying these updates will mitigate the issue on affected Linux systems. Patch status is confirmed by vendor advisories.