CVE-2025-43441: Processing maliciously crafted web content may lead to an unexpected process crash in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
AI Analysis
Technical Summary
CVE-2025-43441 is a vulnerability in Apple Safari and WebKitGTK where processing specially crafted malicious web content can cause an unexpected process crash due to improper memory handling, specifically buffer overflow conditions (CWE-119, CWE-120). The flaw was addressed by Apple with improved memory handling and fixed in Safari 26.1 and corresponding OS versions (iOS 18.7.2, iPadOS 18.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1). Red Hat's advisory confirms the vulnerability affects WebKitGTK4 packages used in various GNOME components on Red Hat Enterprise Linux 7 Extended Lifecycle Support. Exploitation requires tricking a user into loading malicious web content, potentially causing denial of service via process crashes. While remote code execution is not confirmed, the possibility is not discarded. Red Hat provides patches and recommends removing or updating affected packages where feasible.
Potential Impact
The vulnerability can cause denial of service by crashing the Safari or WebKitGTK process when processing maliciously crafted web content. This may disrupt user sessions or applications relying on these components. Although no confirmed remote code execution exploits are known, the underlying buffer overflow weaknesses could potentially be leveraged for more severe impacts. Exploitation requires user interaction to load malicious content. The impact is rated medium severity with a CVSS 3.1 score of 4.3 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).
Mitigation Recommendations
A fix is available and has been released by Apple in Safari 26.1 and corresponding OS versions (iOS 18.7.2, iPadOS 18.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1). Red Hat has also released security updates for WebKitGTK4 packages on Red Hat Enterprise Linux 7 Extended Lifecycle Support. Users should apply these official patches promptly. Additionally, to mitigate risk, avoid processing or loading untrusted web content with WebKitGTK components. Removing unnecessary WebKitGTK3 packages can reduce exposure without impacting system functionality. No further generic mitigations are recommended beyond applying vendor fixes and avoiding untrusted content processing.
CVE-2025-43441: Processing maliciously crafted web content may lead to an unexpected process crash in Apple Safari
Description
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS v3.1
Score 4.3medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-43441 is a vulnerability in Apple Safari and WebKitGTK where processing specially crafted malicious web content can cause an unexpected process crash due to improper memory handling, specifically buffer overflow conditions (CWE-119, CWE-120). The flaw was addressed by Apple with improved memory handling and fixed in Safari 26.1 and corresponding OS versions (iOS 18.7.2, iPadOS 18.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1). Red Hat's advisory confirms the vulnerability affects WebKitGTK4 packages used in various GNOME components on Red Hat Enterprise Linux 7 Extended Lifecycle Support. Exploitation requires tricking a user into loading malicious web content, potentially causing denial of service via process crashes. While remote code execution is not confirmed, the possibility is not discarded. Red Hat provides patches and recommends removing or updating affected packages where feasible.
Potential Impact
The vulnerability can cause denial of service by crashing the Safari or WebKitGTK process when processing maliciously crafted web content. This may disrupt user sessions or applications relying on these components. Although no confirmed remote code execution exploits are known, the underlying buffer overflow weaknesses could potentially be leveraged for more severe impacts. Exploitation requires user interaction to load malicious content. The impact is rated medium severity with a CVSS 3.1 score of 4.3 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).
Mitigation Recommendations
A fix is available and has been released by Apple in Safari 26.1 and corresponding OS versions (iOS 18.7.2, iPadOS 18.7.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1). Red Hat has also released security updates for WebKitGTK4 packages on Red Hat Enterprise Linux 7 Extended Lifecycle Support. Users should apply these official patches promptly. Additionally, to mitigate risk, avoid processing or loading untrusted web content with WebKitGTK components. Removing unnecessary WebKitGTK3 packages can reduce exposure without impacting system functionality. No further generic mitigations are recommended beyond applying vendor fixes and avoiding untrusted content processing.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apple
- Date Reserved
- 2025-04-16T15:24:37.125Z
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2025-43441","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:23583","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:22789","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:23433","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:23434","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:23743","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:23742","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:23452","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:23451","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:23591","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:23110","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:22790","vendor":"Red Hat"}]
Threat ID: 69095bae78d4f574c2a8f3fa
Added to database: 11/04/2025, 01:49:34 UTC
Last enriched: 08/14/2026, 13:04:58 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 100
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.