Research · Aug 20, 2025
Critical Out-of-Bounds Write Vulnerability in Apple Operating Systems
Recent updates from Apple address a critical out-of-bounds write vulnerability affecting multiple operating systems, potentially exploited in targeted attacks.
What changed
Apple has resolved a significant out-of-bounds write vulnerability across its platforms, including iOS, iPadOS, and macOS. This issue was addressed through enhanced bounds checking, ensuring that memory corruption from malicious image files is mitigated.
- The vulnerability was fixed in several versions: iOS 15.8.5, iPadOS 15.8.5, iOS 16.7.12, iPadOS 16.7.12, iOS 18.6.2, iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sono
- Apple has acknowledged that this vulnerability may have been exploited in sophisticated attacks targeting specific individuals.
Who is affected
The vulnerability impacts a range of Apple products, posing risks to users across various operating systems.
- iOS users, particularly those on versions prior to the latest updates.
- iPadOS users, especially those using older versions.
- macOS users, including those on Sequoia, Sonoma, and Ventura versions.
- Individuals targeted in sophisticated cyber attacks may also be at risk.
What to do
Users of affected Apple products should promptly update their devices to the latest available versions to mitigate the risk associated with this vulnerability.
- Check for system updates and install the latest versions of iOS, iPadOS, and macOS.
- Monitor security advisories from Apple for any further updates or related vulnerabilities.
- Consider implementing additional security measures, such as using antivirus software and being cautious with unknown image files.