CVE-2025-43434

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected Safari crash

Researchers: Google Big Sleep

Attribute Value
CVE CVE-2025-43434
Bugzilla 297958
Component JSC
Bug Class UAF
Severity medium
Commit ef9304e0e82bf304…
Advisory Apple Advisory

Root Cause Analysis

A use-after-free issue was addressed with improved memory management.

Files Changed

Source Files

  • Source/JavaScriptCore/wasm/WasmGlobal.h
  • Source/JavaScriptCore/wasm/WasmTable.cpp
  • Source/JavaScriptCore/wasm/WasmTable.h
  • Source/JavaScriptCore/wasm/WasmTypeDefinition.h
  • Source/JavaScriptCore/wasm/WasmTypeDefinitionInlines.h