CVE-2025-43240

Overview

Advisory: Apple Security Advisory

Impact:

Description: A download’s origin may be incorrectly associated

Researchers: Syarif Muhammad Sajjad

Attribute	Value
CVE	CVE-2025-43240
Bugzilla	293994
Component	WebKit
Bug Class	LogicError
Severity	medium
Commit	0578185b8a7484c5…
Advisory	Apple Advisory

Root Cause Analysis

A logic issue was addressed with improved checks.

Files Changed

Source Files

• Source/WebKit/UIProcess/WebPageProxy.cpp

Test Files

• Tools/TestWebKitAPI/Tests/WebKitCocoa/Download.mm