Feed/CVE-2025-43529
CVE-2025-43529HIGHCVSS 8.8CISA KEV: Actively Exploited

Apple Multiple Products Use-After-Free WebKit Vulnerability

Published Dec 15, 2025·Updated Oct 7, 2026

NVD Description

Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Public Exploits & PoCs10 found

[POC] CVE-2025-43529 — CVE-2025-43529

exploit for cve-2025-43529

6

[POC] CVE-2025-43529 — CVE-2025-43529-no-forked

CVE-2025-43529 safari fakeobj

[POC] CVE-2025-43529 — bugtest

CVE-2025-43529 Test

[POC] CVE-2025-43529 — CVE-2025-43529

Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore.

[POC] CVE-2025-43529 — CTT-Apple-Silicon-Refraction

webkit_refraction.js (The 33-Layer WebGL Payload) ​This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It induces the Use-After-Free (UAF) in CVE-2025-43529 by desynchronizing the WebKit garbage collector from the GPU's Metal command buffer.

[POC] CVE-2025-43529 — cve-2025-43529-arbitrary-ref

A demonstration of arbitrary address referencing using cve-2025-43529

[POC] CVE-2025-43529 — sakyu7.github.io

🔍 Analyze WebKit and ANGLE vulnerabilities with this repository for CVE-2025-43529 and CVE-2025-14174, focusing on verified components and ongoing efforts.

[POC] CVE-2025-43529 — Analysis

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

[POC] CVE-2025-43529 — WebKit-UAF-ANGLE-OOB-Analysis

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

[POC] CVE-2025-43529 — Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529-

CTT-Enhanced iOS Safari Exploit (based on CVE-2025-43529)

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free