WebKitGTK contains a memory handling flaw that allows attackers to craft malicious web pages which, when rendered, can corrupt memory through buffer overflows or out‑of‑bounds writes, potentially leading to arbitrary code execution or denial of service.

Affected Apple products include Safari on macOS Sonoma as well as iOS and iPadOS devices, with specific patched versions in iOS 17.2, iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, and prior mobile releases; various Red Hat Enterprise Linux releases such as RHEL 8.x and RHEL 9.x are also listed as impacted.

The CVSS score of 8.8 classifies the issue as high severity, but an EPSS score of less than 1% suggests a low likelihood of current exploitation; the vulnerability is not in the CISA KEV catalog, and exploitation would require an attacker to supply specially crafted web content viewed in Safari or another WebKitGTK‑based component, potentially enabling the user to run arbitrary code.