Last seen November 4, 2025

Safari WebKit buffer overflow Vulnerability

Google's AI agent "Big Sleep" identified five new security flaws, including buffer overflow (CVE-2025-43429) and use-after-free (CVE-2025-43434) vulnerabilities, within Apple's Safari WebKit component. These critical vulnerabilities, if exploited by processing maliciously crafted web content, could result in unexpected browser crashes or memory corruption, requiring immediate patching via various Apple OS updates.

Technical Severity
Low severity
Lifecycle Status

STABLE

Sources

What Happened

Google's AI agent "Big Sleep" identified five new security flaws, including buffer overflow (CVE-2025-43429) and use-after-free (CVE-2025-43434) vulnerabilities, within Apple's Safari WebKit component. These critical vulnerabilities, if exploited by processing maliciously crafted web content, could result in unexpected browser crashes or memory corruption, requiring immediate patching via various Apple OS updates.

Why This Matters

Publisher reporting describes a security event affecting finds. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.

Recommended Action

Confirm whether finds is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Nov 04, 2025 05:30

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

Amazon AWSAppleGoogleSafari WebKitAI AgentsBig Sleep

Authoritative Intelligence

CVE CVE-2025-43429, CVE-2025-43434 Incident identifier

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Public GitHub References

Search GitHub for public repositories that mention this CVE. BugSkan only lists repository metadata as a defensive awareness signal ā€” it does not fetch or display exploit code.

CVE-2025-43429 on GitHub CVE-2025-43434 on GitHub

No public GitHub repositories were found for CVE-2025-43429.

Timeline

  • Incident first seen
    Nov 04, 2025 05:30

    BugSkan first recorded this incident.

  • Googleā€™s AI ā€˜Big Sleepā€™ Finds 5 New Vulnerabilities in Appleā€™s Safari WebKit - The Hacker News
    Nov 04, 2025 05:30

    thehackernews.com Ā· Vulnerability

Sources

Googleā€™s AI ā€˜Big Sleepā€™ Finds 5 New Vulnerabilities in Appleā€™s Safari WebKit - The Hacker News

thehackernews.com Ā· Nov 04, 2025 05:30

Google's AI agent "Big Sleep" identified five new security flaws, including buffer overflow (CVE-2025-43429) and use-after-free (CVE-2025-43434) vulnerabilities, within Apple's Safari WebKit component. These critical vulnerabilities, if exploited by processing maliciously crafted web content, could result in unexpected browser crashes or memory corruption, requiring immediate patching via various Apple OS updates.

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

ā† Back to incident intelligence