Apple CoreMedia and CoreAudio Vulnerability Leading to Unexpected App Termination

A vulnerability exists in the CoreMedia and CoreAudio frameworks of multiple Apple operating systems, including iPadOS, macOS Ventura, macOS Sonoma, watchOS, and tvOS. This vulnerability allows for parsing certain files in a way that can cause an application to terminate unexpectedly. The issue has been attributed to a type confusion problem, which has been addressed with improved validation checks.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing applications to crash unexpectedly.

Remediation

Users can update to iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, watchOS 11.3, or tvOS 18.3 to address this vulnerability.