Research · Apr 16, 2025
Critical Arbitrary Read and Write Vulnerability in Apple Products
A serious vulnerability affecting multiple Apple products has been addressed, potentially allowing attackers to bypass security measures and exploit targeted individuals.
What changed
Apple has resolved a significant vulnerability that allowed arbitrary read and write access in several of its products. This flaw could enable attackers to bypass Pointer Authentication, posing a serious risk to user data and device integrity.
The issue has been patched in the latest updates for iOS, iPadOS, macOS, tvOS, and visionOS, ensuring that users are protected against potential exploitation.
Who is affected
The vulnerability impacts a wide range of Apple products, making it crucial for users to be aware of the risks involved.
Specific groups that may be particularly vulnerable include those using the following products:
- iOS devices running versions prior to 18.4.1
- iPadOS devices prior to 18.4.1
- macOS Sequoia versions before 15.4.1
- tvOS and visionOS devices prior to their respective updates
What to do
Users of affected Apple products are strongly advised to update their devices to the latest software versions immediately to mitigate the risks associated with this vulnerability.
Regularly checking for software updates and applying them promptly can help maintain security and protect against potential exploits.