CVEs / CVE-2025-31277

CVE-2025-31277: Apple Multiple Products Buffer Overflow Vulnerability

Known exploited in the CISA KEV catalog since 20 Mar 2026
high 8.8 CVSS 3.1 (from the CNA)
EPSS 1.67% chance of exploitation in the next 30 days, higher than 76% of CVEs (30 Oct 2026)
Last changed at its sources 21 Sep 2026

Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.

Check your servers with Stackurity Already using Stackurity? Search for CVE-2025-31277

Summary

Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.
CISA, Known Exploited Vulnerabilities catalog

Description

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
The CVE record, via NVD · published 30 Jul 2025 · NVD status: Analyzed

Affected and fixed versions

As stated by the CVE record (from the CNA)
Product	Affected	Fixed in
Apple Safari	before 18.6	18.6
Apple iOS and iPadOS	before 18.6	18.6
Apple macOS	before 15.6	15.6
Apple tvOS	before 18.6	18.6
Apple visionOS	before 2.6	2.6
Apple watchOS	before 11.6	11.6

Exploitation

In CISA KEV since	20 Mar 2026
Due date for US federal agencies	3 Apr 2026
Used in ransomware campaigns	Unknown
Required action	Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Severity

CVSS 3.1	8.8 high `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H` Scored by the CNA (134c704f-9b21-4f2e-91b3-4a467353bcc0)
Weakness	CWE-119, CWE-120

References

CVE-2025-31277 on NVD
CVE-2025-31277 in the CISA KEV catalog
https://support.apple.com/en-us/124147 (cited by CISA)
https://support.apple.com/en-us/124149 (cited by CISA)
https://support.apple.com/en-us/124152 (cited by CISA)
https://support.apple.com/en-us/124153 (cited by CISA)
https://support.apple.com/en-us/124155 (cited by CISA)
CVE-2025-31277 on OSV
https://support.apple.com/en-us/124147 Release Notes, Vendor Advisory
https://support.apple.com/en-us/124149 Release Notes, Vendor Advisory
https://support.apple.com/en-us/124152 Release Notes, Vendor Advisory
https://support.apple.com/en-us/124153 Release Notes, Vendor Advisory
https://support.apple.com/en-us/124154 Release Notes, Vendor Advisory
https://support.apple.com/en-us/124155 Release Notes, Vendor Advisory
http://seclists.org/fulldisclosure/2025/Aug/0 Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2025/Jul/30 Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2025/Jul/32 Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2025/Jul/36 Mailing List, Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:17643 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:17741 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:17743 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:17802 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:17807 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:18097 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:19109 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:19157 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:19165 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:19352 Third Party Advisory

Sources

Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.

This product uses data from the NVD API but is not endorsed or certified by the NVD.