CVE-2026-43703 is a vulnerability in Apple iOS and iPadOS where processing maliciously crafted web content can lead to an unexpected process crash due to improper memory handling. The issue is addressed by improved memory management in iOS 26.5.2 and iPadOS 26.5.2. The CVSS 3.1 base score is 6.5 (medium severity), with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, but high impact on availability. The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-787 (Out-of-bounds Write). No known exploits are reported in the wild. The affected versions include all iOS and iPadOS versions before 26.5.2.

Successful exploitation of this vulnerability may cause an unexpected process crash, resulting in denial of service (availability impact). There is no impact on confidentiality or integrity. The attack requires user interaction and can be triggered remotely via network by processing crafted web content.

A fix is available in iOS 26.5.2 and iPadOS 26.5.2. Users and administrators should update affected devices to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.