Threats Tagged 'cve-2025-43529'
View all threats tagged with 'cve-2025-43529'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-43529'
Click on any threat for detailed analysis and mitigation recommendations
Thirteen malicious Composer theme packages published on Packagist across five vendor namespaces inject JavaScript into Vietnamese movie and comic streaming sites. The injected code executes two operations: a mobile ad-fraud and gambling redirect chain, and on iPhones, a WebKit-to-kernel exploit chain installing spyware. The iOS chain weaponizes CVE-2025-31277 and CVE-2025-43529, targeting devices running iOS 18.4 through 18.6.x on iPhone XS through iPhone 16. The exploit chain progresses from WebKit renderer through GPU process to kernel escape via AppleM2ScalerCSCDriver, ultimately deploying spyware that exfiltrates keychain databases, cryptocurrency wallet seeds from seven wallet applications, Wi-Fi passwords, SMS, photos, contacts, and location data. Infrastructure resolves to FUNNULL, a sanctioned provider operated by Chinese national Liu Lizhi. The theme operators are Vietnamese-based, publishing trojanized forks of OphimCMS and KKPhim projects, affecting site operators who unknowingly serve malicious... Join the discussion | CVE Database V5 | 08/31/2026, 20:09:42 UTC Added: 12/17/2025, 20:58:40 UTC |
0 WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3. Security Fix(es): * webkitgtk: webkitgtk: Use-after-free due to improper memory management (CVE-2025-43529) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43501) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43531) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43535) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43536) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Join the discussion | GCVE Database | 12/24/2025, 00:00:00 UTC Added: 06/25/2026, 21:47:03 UTC |
Showing 1 to 2 of 2 results