Almost half a dozen WebKit bugs discovered

Apple's WebKit browser engine was found by Google's artificial intelligence-based cybersecurity agent Big Sleep to have been affected by five security bugs, which could be leveraged to crash browsers or corrupt memory, reports The Hacker News.

Potential abuse of the buffer overflow vulnerability, tracked as CVE-2025-43529; the unspecified flaw, tracked as CVE-2025-43430; and the use-after-free issue, tracked as CVE-2025-43434, could lead to unexpected process crashes via illicitly crafted web content, while abuse of the unspecified defects, tracked as CVE-2025-43431 and CVE-2025-43433, could enable memory corruption.

Active exploitation has not been observed but Apple has already addressed the vulnerabilities as part of iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1, and Safari 26.1 updates.

Such a development comes months after Google's Big Sleep was reported to have discovered a high-severity memory corruption flaw in the SQLite open-source database engine, tracked as CVE-2025-6965.