CVE-2025-31204

CVE-2025-31204 is a memory corruption vulnerability in Apple's WebKit engine that arises when processing maliciously crafted web content. The root cause is improper memory handling during web content parsing, which can be triggered by visiting a specially crafted website [1][2][3][4].

Exploitation

Exploitation requires no authentication beyond normal browser access; a victim need only load a malicious webpage in Safari or any app using WebKit. The attacker may deliver the content via a compromised site, phishing link, or ad injection. No special network position is required, making the attack surface broad.

Impact

Successful exploitation could allow an attacker to corrupt memory, potentially leading to arbitrary code execution, unexpected app termination, or disclosure of sensitive information. The vulnerability is rated High with a CVSS v3 score of 8.8, indicating significant impact on confidentiality, integrity, and availability.

Mitigation

Apple has addressed the issue in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, and watchOS 11.5. Users are strongly advised to update affected devices immediately [1][2][3][4]. No workarounds are available, and the vulnerability is not known to be exploited in the wild as of the patch release.