CVE-2025-43213 is a vulnerability in Apple Safari caused by improper memory handling when processing maliciously crafted web content, which may lead to an unexpected crash of the Safari browser. This issue affects Safari and related Apple platforms prior to version 18.6 (and corresponding OS versions). The vulnerability has a CVSS 3.1 score of 6.5 (medium severity) with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts availability only. Red Hat's advisory confirms that the issue is addressed in updated webkitgtk4 packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support. The vendor advisory confirms an official fix is available in Safari 18.6 and related OS versions.

Successful exploitation of this vulnerability may cause Safari to crash unexpectedly, resulting in denial of service for the user. There is no indication of confidentiality or integrity impact. No known exploits in the wild have been reported.

An official fix is available and has been released in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Users and administrators should update affected Apple platforms to these versions or later to remediate the vulnerability. For Red Hat Enterprise Linux 7 Extended Lifecycle Support users, updated webkitgtk4 packages addressing this issue are available and should be applied as per Red Hat's advisory instructions. Patch status is confirmed by vendor advisories.