PT-2025-31297 · Apple+3 · Macos Sequoia+10
Published
2025-07-29
·
Updated
2026-05-19
·
CVE-2025-43213
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 18.6
macOS Sequoia versions prior to 15.6
iOS versions prior to 18.6
iPadOS versions prior to 18.6
tvOS versions prior to 18.6
watchOS versions prior to 11.6
visionOS versions prior to 2.6
Description
The issue involves a memory buffer overflow within the WebKit web page rendering module of macOS, iPadOS, visionOS, iOS, watchOS, and tvOS. Exploitation may allow a remote attacker to cause a denial of service. The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Recommendations
Safari versions prior to 18.6 should be updated to version 18.6 or later.
macOS Sequoia versions prior to 15.6 should be updated to version 15.6 or later.
iOS versions prior to 18.6 should be updated to version 18.6 or later.
iPadOS versions prior to 18.6 should be updated to version 18.6 or later.
tvOS versions prior to 18.6 should be updated to version 18.6 or later.
watchOS versions prior to 11.6 should be updated to version 11.6 or later.
visionOS versions prior to 2.6 should be updated to version 2.6 or later.
Fix
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Apple Macos
Rocky Linux
Safari
Ubuntu
Ios
Ipados
Macos Sequoia
Tvos
Visionos
Watchos