Apple CoreGraphics and CoreText Vulnerability Allowing Memory Disclosure via Malicious Fonts

A vulnerability exists in multiple Apple operating systems, including macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. This vulnerability arises from improper memory handling in the CoreGraphics and CoreText frameworks. When a maliciously crafted font is processed, it may lead to the unauthorized disclosure of process memory.

Impact

Exploitation of this vulnerability can result in the disclosure of process memory, potentially allowing for the extraction of sensitive information or the exploitation of other vulnerabilities that depend on memory access.