CVE-2025-24201

Name of the Vulnerable Software and Affected Versions Safari versions prior to 18.3.1 iOS versions prior to 15.8.4 iOS versions prior to 16.7.11 iOS versions prior to 18.3.2 iPadOS versions prior to 15.8.4 iPadOS versions prior to 16.7.11 iPadOS versions prior to 18.3.2 iPadOS versions prior to 17.7.6 macOS Sequoia versions prior to 15.3.2 visionOS versions prior to 2.3.2 watchOS versions prior to 11.4

Description An out-of-bounds write issue exists in the WebKit rendering engine, where data is written outside the boundaries of the allocated memory buffer. This flaw allows maliciously crafted web content to break out of the Web Content sandbox, potentially enabling a remote attacker to execute arbitrary code. There are reports that this issue was exploited in highly sophisticated attacks targeting specific individuals on versions of iOS prior to iOS 17.2.

Recommendations Update Safari to version 18.3.1. Update iOS to version 15.8.4, 16.7.11, or 18.3.2. Update iPadOS to version 15.8.4, 16.7.11, 18.3.2, or 17.7.6. Update macOS Sequoia to version 15.3.2. Update visionOS to version 2.3.2. Update watchOS to version 11.4.