CVEvulnerability
CVE-2025-24158
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-79
Description
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing web content may lead to a denial-of-service.
Affected configurations
• apple safari (< 18.3)
• apple ipados (< 18.3)
• apple iphone os (< 18.3)
• apple macos (< 15.3)
• apple tvos (< 18.3)
• apple visionos (< 2.3)
• apple watchos (< 11.3)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://support.apple.com/en-us/122066 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122068 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122071 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122072 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122073 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122074 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jan/13 seclists.org
- http://seclists.org/fulldisclosure/2025/Jan/15 seclists.org
- http://seclists.org/fulldisclosure/2025/Jan/18 seclists.org
- http://seclists.org/fulldisclosure/2025/Jan/20 seclists.org
- https://lists.debian.org/debian-lts-announce/2025/02/msg00014.html lists.debian.org