CVE-2025-46282
Overview
Advisory: Apple Security Advisory
Impact:
Description: An app may be able to access sensitive user data
Researchers: Wojciech Regula of SecuRing (wojciechregula.blog)
| Attribute | Value |
|---|---|
| CVE | CVE-2025-46282 |
| Bugzilla | 295941 |
| Component | WebKit |
| Bug Class | LogicError |
| Severity | high |
| Commit | 50b0e0bcc62b2450… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with additional permissions checks.
Files Changed
Source Files
Source/WebKit/UIProcess/UserMediaPermissionRequestManagerProxy.cppSource/WebKit/UIProcess/WebPageProxy.cppSource/WebKit/UIProcess/WebPageProxy.h
Test Files
Tools/TestWebKitAPI/TestWebKitAPI.xcodeproj/project.pbxprojTools/TestWebKitAPI/Tests/WebKit/GetUserMedia.mmTools/TestWebKitAPI/Tests/WebKitCocoa/NotificationAPI.mmTools/TestWebKitAPI/Tests/WebKitCocoa/UIDelegate.mmTools/TestWebKitAPI/Tests/WebKitCocoa/example.webarchive