Apple CoreMedia Out-of-Bounds Access Vulnerability Allowing Memory Corruption

A vulnerability in the CoreMedia framework of Apple software products, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, allows for out-of-bounds access in media processing. This issue could lead to memory corruption, causing unexpected application termination or disruption of normal processing. The vulnerability arises from insufficient bounds checking when handling certain media files.

Impact

Exploitation of this vulnerability can cause memory corruption, leading to unexpected application termination or disruption of normal processing.

Remediation

Users can update to iOS 18.6, iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, tvOS 18.6, visionOS 2.6, or watchOS 11.6 to address this vulnerability.