CVE-2025-31217

Summary

The issue was addressed with improved input validation. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Affected Software

VendorProductVersion RangeStatus
AppleSafari0 < 18.5affected
AppleiOS and iPadOS0 < 18.5affected
AppleiPadOS0 < 17.7.7affected
ApplemacOS0 < 15.5affected
AppletvOS0 < 18.5affected
ApplevisionOS0 < 2.5affected
ApplewatchOS0 < 11.5affected

Weaknesses

  • Processing maliciously crafted web content may lead to an unexpected Safari crash

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References