APPLE-122285

CVE-2025-24201

Impact: Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.)

Description: An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.