Research · Apr 16, 2025 · ZeroDay Catalog
Critical Arbitrary Read and Write Vulnerability in Multiple Apple Products
Apple has addressed a significant vulnerability affecting multiple products, which could allow attackers to bypass security mechanisms.
What changed
Apple has resolved a critical arbitrary read and write vulnerability across several of its platforms. This flaw could allow attackers to bypass Pointer Authentication, potentially leading to unauthorized access to sensitive data.
The issue has been effectively mitigated by removing the vulnerable code in the latest software updates.
- Fixed in iOS 18.4.1 and iPadOS 18.4.1
- Addressed in macOS Sequoia 15.4.1
- Patched in tvOS 18.4.1 and visionOS 2.4.1
Who is affected
This vulnerability impacts a wide range of Apple products, making it critical for users to update their systems promptly.
The following groups are particularly at risk due to the nature of the vulnerability.
- Users of iOS and iPadOS devices running versions prior to 18.4.1
- macOS users on Sequoia versions before 15.4.1
- Individuals using tvOS and visionOS versions earlier than 18.4.1 and 2.4.1 respectively
- Targeted individuals who may have been affected by sophisticated attacks exploiting this vulnerability
What to do
It is imperative for all users of the affected Apple products to update their systems to the latest versions as soon as possible to mitigate the risk associated with this vulnerability.
Regularly monitor security advisories from Apple and apply updates promptly to ensure ongoing protection.
- Update to iOS 18.4.1 or iPadOS 18.4.1 immediately
- Upgrade to macOS Sequoia 15.4.1
- Install the latest tvOS 18.4.1 and visionOS 2.4.1 updates
- Review security settings and practices to enhance overall device security