CVE-2025-43356
Overview
Advisory: Apple Security Advisory
Impact:
Description: A website may be able to access sensor information without user consent
Researchers: Jaydev Ahire
| Attribute | Value |
|---|---|
| CVE | CVE-2025-43356 |
| Bugzilla | 296153 |
| Component | WebKit |
| Bug Class | LogicError |
| Severity | medium |
| Commit | c420ed2f891b1948… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved handling of caches.
Files Changed
Source Files
Source/WebKit/UIProcess/WebPageProxy.cpp
Test Files
Tools/TestWebKitAPI/Tests/WebKit/GetUserMedia.mmTools/TestWebKitAPI/Tests/WebKitCocoa/media-session-capture.html