Executive brief
A memory management vulnerability exists in Apple's Safari web browser and operating systems including iOS and macOS. If a user visits a website containing specifically crafted malicious content, it could cause the Safari browser to crash unexpectedly. This impact is primarily limited to service disruption (denial of service) on the affected device.
Technical details
A use-after-free (UAF) vulnerability (CWE-416) exists in Safari and the underlying operating systems (iOS, iPadOS, and macOS). The flaw is rooted in improper memory management during the processing of web content. A remote attacker can exploit this by enticing a user to visit a maliciously crafted webpage, which triggers the memory corruption. Successful exploitation results in an application crash (denial of service). Apple addressed the issue in version 26 of the affected products by implementing improved memory management logic.
Affected products
- Apple Safari before 26
- Apple iOS before 26
- Apple iPadOS before 26
- Apple macOS Tahoe before 26
Timeline
- 2025-09-15: disclosed
- 2025-09-15: patched
- 2025-09-15: advisory
References
- https://support.apple.com/en-us/125108
- https://support.apple.com/en-us/125110
- https://support.apple.com/en-us/125113
- http://seclists.org/fulldisclosure/2025/Sep/49
- http://seclists.org/fulldisclosure/2025/Sep/53
- http://seclists.org/fulldisclosure/2025/Sep/59
- http://www.openwall.com/lists/oss-security/2025/09/22/3