Apple Out-of-Bounds Write Vulnerability in Font Processing

A vulnerability allowing out-of-bounds write operations has been identified in the FontParser component of various Apple operating systems, including macOS, iOS, iPadOS, and visionOS. This vulnerability arises from insufficient bounds checking when processing certain fonts, which can lead to unexpected application crashes or corruption of process memory. The issue has been addressed in multiple recent updates.

Impact

Exploitation of this vulnerability can cause applications to terminate unexpectedly or result in the corruption of process memory, potentially leading to further exploitation.

Remediation

Users can update to the latest versions of macOS Sonoma, macOS Tahoe, macOS Sequoia, iOS 26.0.1, iPadOS 26.0.1, iOS 18.7.1, iPadOS 18.7.1, or visionOS 26.0.1 to address this vulnerability.