Apple ImageIO Out-of-Bounds Read Vulnerability Allowing Process Memory Disclosure

A vulnerability in the ImageIO component of Apple software, including iOS, iPadOS, macOS, tvOS, and watchOS, allows for an out-of-bounds read that can lead to the disclosure of process memory. This issue was addressed with improved input validation. The vulnerability affects several different versions and ranges across the mentioned operating systems.

Impact

Exploitation of this vulnerability can result in the unauthorized disclosure of process memory, potentially allowing for the extraction of sensitive information.

Remediation

Users can update to the latest versions of watchOS, iOS, iPadOS, tvOS, and macOS to address this vulnerability. Specific update instructions can be found on the Apple Support website.