CVE-2025-43427
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: Gary Kwong, rheza (@ginggilBesel)
| Attribute | Value |
|---|---|
| CVE | CVE-2025-43427 |
| Bugzilla | 298628 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | 127c1d5c4d40d679… |
| Advisory | Apple Advisory |
Root Cause Analysis
This issue was addressed through improved state management.
Files Changed
Source Files
Source/JavaScriptCore/bytecode/UnlinkedCodeBlock.hSource/JavaScriptCore/bytecompiler/BytecodeGenerator.cppSource/JavaScriptCore/llint/LowLevelInterpreter32_64.asmSource/JavaScriptCore/llint/LowLevelInterpreter64.asmSource/JavaScriptCore/runtime/CachedTypes.cpp
Test Files
JSTests/stress/switch-imm-int32-max.js