CVE-2025-43535

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected process crash

Researchers: Google Big Sleep, Nan Wang (@eternalsakura13)

Attribute	Value
CVE	CVE-2025-43535
Bugzilla	300774
Component	JSC
Bug Class	LogicError
Severity	medium
Commit	26d50a4d4b2df76c…
Advisory	Apple Advisory

Root Cause Analysis

The issue was addressed with improved memory handling.

Files Changed

Source Files

• Source/JavaScriptCore/wasm/WasmBBQJIT64.cpp

Test Files

• JSTests/wasm/stress/bbq-array-set-consume.js