VDB
GHSA-qcgv-3crg-w972
GHSA-qcgv-3crg-w972
PUBLISHED
CVSS 6.5 MEDIUM
Record from GitHub Advisory Database · Published July 30, 2025
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Risk scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Timeline
- Jul 30, 2025 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-qcgv-3crg-w972
vulnetix vdb fixes GHSA-qcgv-3crg-w972Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-qcgv-3crg-w972/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://seclists.org/fulldisclosure/2025/Aug/0 url
- http://seclists.org/fulldisclosure/2025/Jul/30 url
- http://seclists.org/fulldisclosure/2025/Jul/32 url
- http://seclists.org/fulldisclosure/2025/Jul/36 url
- https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-43212 advisory
- http://www.openwall.com/lists/oss-security/2025/08/02/1 url
- https://support.apple.com/en-us/124147 advisory
- https://support.apple.com/en-us/124149 advisory
- https://support.apple.com/en-us/124152 advisory
- https://support.apple.com/en-us/124153 advisory
- https://support.apple.com/en-us/124154 advisory
- https://support.apple.com/en-us/124155 advisory