Apple Products Out-of-Bounds Access Vulnerability in Core Text and Model I/O Components

A vulnerability allowing out-of-bounds access has been identified in multiple Apple products, including iOS, iPadOS, tvOS, visionOS, and macOS Sequoia. This vulnerability arises in the Core Text and Model I/O components, where improper input validation of media files can lead to memory corruption or unexpected application termination. The issue has been addressed with improved bounds checking and input validation.

Impact

Exploitation of this vulnerability can cause memory corruption, leading to unexpected application termination or process memory corruption.

Remediation

Users can update to iOS 26.1, iPadOS 26.1, tvOS 26.1, visionOS 26.1, or macOS Sequoia 15.7.2 to address this vulnerability.