Apple CoreMedia and Related Components Memory Corruption Vulnerability Leading to Application Termination

A type confusion vulnerability has been identified in multiple Apple operating systems, including iPadOS 18.3, macOS Sonoma 14.7.3, visionOS 2.3, watchOS 11.3, and tvOS 18.3. This vulnerability allows for memory corruption, which can be exploited to cause an unexpected termination of the affected application. The issue arises within the CoreMedia framework and related components, where improper input validation can be exploited to manipulate process memory, leading to application crashes.

Impact

Exploitation of this vulnerability causes a denial-of-service by terminating the affected application unexpectedly.

Remediation

Users can update to iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, watchOS 11.3, or tvOS 18.3 to address this vulnerability.