Apple Products Out-of-Bounds Read Vulnerability in CoreText and CoreGraphics Components

A vulnerability allowing out-of-bounds read operations has been identified in multiple Apple products, including visionOS 2.4, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. This vulnerability arises from insufficient input validation when processing maliciously crafted fonts, which may lead to the unintentional disclosure of process memory.

Impact

Exploitation of this vulnerability can result in unauthorized access to process memory, potentially allowing for the extraction of sensitive information.

Remediation

Users can update to the latest versions of the affected operating systems to address this vulnerability.