CVE-2025-31277: Processing maliciously crafted web content may lead to memory corruption in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
AI Analysis
Technical Summary
CVE-2025-31277 is a memory corruption vulnerability in Apple Safari and associated Apple OS platforms caused by processing maliciously crafted web content. The vulnerability involves improper memory handling that could be exploited to cause memory corruption, potentially leading to arbitrary code execution or denial of service. Apple fixed the issue in Safari 18.6 and corresponding OS versions (iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6). The vulnerability is tracked under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-120 (Classic Buffer Overflow). Red Hat has released security advisories and updates for WebKitGTK+ to address this vulnerability in Red Hat Enterprise Linux 7 Extended Lifecycle Support. The CVSS score of 8.8 reflects network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. There are no known exploits in the wild currently.
Potential Impact
Successful exploitation of this vulnerability may lead to memory corruption in Safari and related Apple OS platforms, which can result in arbitrary code execution, data corruption, or denial of service. The CVSS score of 8.8 indicates a high impact on confidentiality, integrity, and availability. The vulnerability affects multiple Apple platforms and WebKitGTK+ on Red Hat Enterprise Linux 7. No known exploits have been reported in the wild yet.
Mitigation Recommendations
A fix is available and has been released by Apple in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Users and administrators should update to these versions or later to remediate the vulnerability. Red Hat has also released security updates for WebKitGTK+ packages in Red Hat Enterprise Linux 7 Extended Lifecycle Support; applying these updates will mitigate the issue on affected Linux systems. Patch status is confirmed by vendor advisories. No additional mitigation actions are indicated by the vendor advisories.
CVE-2025-31277: Processing maliciously crafted web content may lead to memory corruption in Apple Safari
Description
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
CVSS v3.1
Score 8.8high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-31277 is a memory corruption vulnerability in Apple Safari and associated Apple OS platforms caused by processing maliciously crafted web content. The vulnerability involves improper memory handling that could be exploited to cause memory corruption, potentially leading to arbitrary code execution or denial of service. Apple fixed the issue in Safari 18.6 and corresponding OS versions (iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6). The vulnerability is tracked under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-120 (Classic Buffer Overflow). Red Hat has released security advisories and updates for WebKitGTK+ to address this vulnerability in Red Hat Enterprise Linux 7 Extended Lifecycle Support. The CVSS score of 8.8 reflects network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. There are no known exploits in the wild currently.
Potential Impact
Successful exploitation of this vulnerability may lead to memory corruption in Safari and related Apple OS platforms, which can result in arbitrary code execution, data corruption, or denial of service. The CVSS score of 8.8 indicates a high impact on confidentiality, integrity, and availability. The vulnerability affects multiple Apple platforms and WebKitGTK+ on Red Hat Enterprise Linux 7. No known exploits have been reported in the wild yet.
Mitigation Recommendations
A fix is available and has been released by Apple in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Users and administrators should update to these versions or later to remediate the vulnerability. Red Hat has also released security updates for WebKitGTK+ packages in Red Hat Enterprise Linux 7 Extended Lifecycle Support; applying these updates will mitigate the issue on affected Linux systems. Patch status is confirmed by vendor advisories. No additional mitigation actions are indicated by the vendor advisories.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- apple
- Date Reserved
- 2025-03-27T16:13:58.344Z
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2025-31277","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:19352","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:17802","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:19157","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:19165","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:19109","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:17807","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:17643","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:17743","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:17741","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:18097","vendor":"Red Hat"}]
Threat ID: 68895a29ad5a09ad0091ade3
Added to database: 07/29/2025, 23:32:57 UTC
Last enriched: 07/15/2026, 08:18:01 UTC
Last updated: 09/10/2026, 19:24:56 UTC
Views: 134
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.