CVE-2025-31217

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected Safari crash

Researchers: Ignacio Sanmillan (@ulexec)

Attribute	Value
CVE	CVE-2025-31217
Bugzilla	289677
Component	WebKit
Bug Class	LogicError
Severity	medium
Commit	2f1c7a102f89c395…
Advisory	Apple Advisory

Root Cause Analysis

The issue was addressed with improved input validation.

Files Changed

Source Files

• Source/ThirdParty/ANGLE/src/libANGLE/renderer/metal/TextureMtl.mm

Test Files

• Source/ThirdParty/ANGLE/src/tests/gl_tests/MipmapTest.cpp