Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
Apple iOS WebKit Memory Corruption Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A memory corruption vulnerability has been identified in the WebKit component of Apple iOS. This issue affects iOS devices including the iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation). The vulnerability arises from improper state management, which can be exploited by processing maliciously crafted web content, leading to arbitrary code execution. Apple is aware of reports suggesting that this vulnerability may have been actively exploited.
Impact
Exploitation of this vulnerability could result in arbitrary code execution on the affected device.
Remediation
Users can update to iOS 12.5.4 to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
