CVE-2025-43431
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to memory corruption
Researchers: Google Big Sleep
| Attribute | Value |
|---|---|
| CVE | CVE-2025-43431 |
| Bugzilla | 298194 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | d4b9e6993567d3c3… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/JavaScriptCore/wasm/js/JSWebAssemblyArrayInlines.hSource/JavaScriptCore/wasm/js/JSWebAssemblyInstance.cppSource/JavaScriptCore/wasm/js/JSWebAssemblyStruct.hSource/JavaScriptCore/wasm/js/WebAssemblyGCStructure.cppSource/JavaScriptCore/wasm/js/WebAssemblyGCStructure.h
Test Files
JSTests/wasm/regress/298194.jsJSTests/wasm/spec-harness/wasm-module-builder-gc.js