US EditionApple fixes new zero-day flaw exploited in targeted attacks
Apple patched a critical ImageIO flaw exploited in sophisticated attacks targeting specific individuals, affecting millions of devices worldwide and enabling remote code execution.
- Apple released emergency security updates on Wednesday to fix a zero-day vulnerability exploited in highly targeted attacks on iPhones, iPads, and Macs.
- Apple identified the flaw, tracked as CVE-2025-43300, as an out-of-bounds write vulnerability in the Image I/O framework, possibly exploited in extremely sophisticated attacks against specific individuals.
- The vulnerability allowed memory corruption through processing malicious image files and was patched by improving bounds checking across iOS 18.6.2, iPadOS 17.7.10, and macOS versions Ventura, Sonoma, and Sequoia.
- Apple has acknowledged that this vulnerability might have been used in a highly advanced cyberattack aimed at particular individuals, and the company recommends installing security updates without delay.
- These fixes form part of seven zero-days Apple patched since January 2025, highlighting ongoing risks and emphasizing the need for users to install updates promptly to prevent exploitation.
16 Articles
16 Articles
Apple Releases Urgent iPhone Update: 4 Things to Know
Apple on Wednesday released an emergency update to fix an urgent vulnerability for its iPhones and iPads that was “exploited in an extremely sophisticated attack.” In a notice on its website, Apple said the updates are available now for its iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch first generation and later, iPad Air third generation and later, iPad seventh generation and later, and iPa…
Apple issues emergency update to fix zero-day exploit in iPhone and macOS
According to Apple, the issue lies within Image I/O, the company's framework for handling a wide range of image file formats. If a device processes a specially crafted image, it can trigger memory corruption. While Apple has not disclosed what specific outcomes this corruption might cause, security experts warn that...Read Entire Article
Coverage Details
Bias Distribution
- 50% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
