Apple iOS, iPadOS, macOS Sequoia, tvOS, and visionOS Out-of-Bounds Access Vulnerability in Model I/O and Core Text

A vulnerability allowing out-of-bounds access has been identified in the media processing components of Apple iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, tvOS 26.1, and visionOS 26.1. This vulnerability arises from insufficient input validation when processing certain media files, which can lead to memory corruption or unexpected application termination. The issue is particularly relevant for users of Apple TV 4K (all models) and Apple Vision Pro (all models), as well as various iPhone and iPad models.

Impact

Exploitation of this vulnerability can cause applications to crash or lead to memory corruption, with potential implications for application stability and data integrity.

Remediation

Users can update to iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, tvOS 26.1, or visionOS 26.1 to address this vulnerability.