CVE-2025-31238
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to memory corruption
Researchers: wac working with Trend Micro Zero Day Initiative
| Attribute | Value |
|---|---|
| CVE | CVE-2025-31238 |
| Bugzilla | 289653 |
| Component | WebCore |
| Bug Class | LogicError |
| Severity | medium |
| Commit | a23df0dfbec0c9df… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved checks.
Files Changed
Source Files
Source/WebCore/page/scrolling/mac/ScrollerMac.hSource/WebCore/page/scrolling/mac/ScrollerMac.mm
Test Files
LayoutTests/fast/scrolling/mac/scrollbars/scrollbar-crash-expected.txtLayoutTests/fast/scrolling/mac/scrollbars/scrollbar-crash.html