CVE-2025-31277

Name of the Vulnerable Software and Affected Versions WebKitGTK (affected versions not specified) WPE WebKit (affected versions not specified) Safari versions prior to 18.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 tvOS versions prior to 18.6 visionOS versions prior to 2.6 watchOS versions prior to 11.6

Description Processing maliciously crafted web content can lead to memory corruption due to improper memory handling. This issue manifests as a buffer overflow, which may allow a remote attacker to cause a denial of service. This flaw is confirmed to be under active exploitation in the wild.

Recommendations Update Safari to version 18.6 Update iOS to version 18.6 Update iPadOS to version 18.6 Update macOS Sequoia to version 15.6 Update tvOS to version 18.6 Update visionOS to version 2.6 Update watchOS to version 11.6 At the moment, there is no information about a newer version that contains a fix for this vulnerability for WebKitGTK and WPE WebKit.