CVE-2025-43531
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: Phil Pizlo of Epic Games
| Attribute | Value |
|---|---|
| CVE | CVE-2025-43531 |
| Bugzilla | 301940 |
| Component | bmalloc |
| Bug Class | Race |
| Severity | medium |
| Commit | 39a5ac27139893e6… |
| Advisory | Apple Advisory |
Root Cause Analysis
A race condition was addressed with improved state handling.
Files Changed
Source Files
Source/bmalloc/libpas/src/libpas/pas_local_allocator_inlines.hSource/bmalloc/libpas/src/libpas/pas_segregated_heap.cSource/bmalloc/libpas/src/libpas/pas_segregated_heap.h
Test Files
Source/bmalloc/libpas/src/test/ExpendableMemoryTests.cpp