CVE-2025-43435

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected process crash

Researchers: Justin Cohen of Google

Attribute	Value
CVE	CVE-2025-43435
Bugzilla	299391
Component	WebCore
Bug Class	LogicError
Severity	medium
Commit	cd945f0c3fe21294…
Advisory	Apple Advisory

Root Cause Analysis

The issue was addressed with improved memory handling.

Files Changed

Source Files

• Source/WebCore/platform/cocoa/WebAVPlayerLayerView.mm