CVE-2025-43265 is an out-of-bounds read vulnerability that was addressed by improved input validation. The flaw could allow processing of maliciously crafted web content to disclose internal application states. This issue is fixed in several Apple operating systems including watchOS 11.6, visionOS 2.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, and tvOS 18.6.