This vulnerability (CVE-2025-24158) in Apple Safari involves a denial-of-service condition triggered by processing certain web content due to improper memory handling. It affects Safari and related Apple operating systems prior to version 18.3 (and corresponding OS versions). The issue was fixed by Apple in Safari 18.3 and the respective OS updates by improving memory handling to prevent the DoS. The CVSS v3.1 base score is 6.5 (medium severity), with an attack vector of network, low attack complexity, no privileges required, user interaction required, and impact limited to availability (denial-of-service).

Successful exploitation of this vulnerability can cause Safari or affected Apple devices to become unresponsive or crash, resulting in denial-of-service. There is no impact on confidentiality or integrity. No known exploits have been reported in the wild.

Apple has released official fixes for this vulnerability in Safari 18.3 and corresponding updates for iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, and watchOS 11.3. Users and administrators should update to these versions to remediate the issue. Patch status is confirmed fixed by the vendor advisory. No additional mitigation actions are required beyond applying these updates.