Maliciously crafted web content may be able to break out of Web Content sandbox

iOS 18.3.2 and iPadOS 18.3.2
Released March 11, 2025

WebKit
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later

Impact: Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.)

Description: An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.

WebKit Bugzilla: 285858

CVE-2025-24201: Apple