CVE-2025-43376
Overview
Advisory: Apple Security Advisory
Impact:
Description: A remote attacker may be able to view leaked DNS queries with Private Relay turned on
Researchers: Mike Cardwell of grepular.com, Bob Lord
| Attribute | Value |
|---|---|
| CVE | CVE-2025-43376 |
| Bugzilla | 295943 |
| Component | WebCore |
| Bug Class | LogicError |
| Severity | medium |
| Commit | 5247bc4ad4b98d16… |
| Advisory | Apple Advisory |
Root Cause Analysis
A logic issue was addressed with improved state management.
Files Changed
Source Files
Source/WebCore/PAL/pal/spi/cf/CFNetworkSPI.hSource/WebCore/platform/network/cf/DNSResolveQueueCFNet.cpp