CVE-2025-43541
MEDIUMSafari < 26.2 - Type Confusion via Malicious Web Content
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2025-43541. PoCs published by crypt0bit, adminlove520.
AI-analyzed exploit summary This repository contains a JavaScript/HTML PoC targeting CVE-2025-43541, a WebKit/JavaScriptCore vulnerability involving ArrayBuffer manipulation and DataView access to trigger crashes or instability. The code is designed for research and demonstrates abnormal behavior in Safari, particularly on iOS.
Description
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Exploits (2)
This repository contains a JavaScript/HTML PoC targeting CVE-2025-43541, a WebKit/JavaScriptCore vulnerability involving ArrayBuffer manipulation and DataView access to trigger crashes or instability. The code is designed for research and demonstrates abnormal behavior in Safari, particularly on iOS.
This repository contains a JavaScript/HTML PoC targeting a WebKit/JavaScriptCore vulnerability (CVE-2025-43541) involving ArrayBuffer resizing and DataView manipulation to trigger browser instability or crashes. The PoC is designed for research and testing purposes, with explicit warnings about potential risks.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L