Apple CoreText Out-of-Bounds Read Vulnerability Allowing Memory Corruption

A vulnerability in the CoreText component of multiple Apple operating systems, including visionOS 26.1, macOS Sonoma 14.8.2, watchOS 26.1, iOS 26.1, iPadOS 26.1, and tvOS 26.1, has been identified. This vulnerability arises from an out-of-bounds read issue that was addressed with improved input validation. However, processing a maliciously crafted media file could still lead to unexpected application termination or corruption of process memory.

Impact

Exploitation of this vulnerability can cause applications to terminate unexpectedly or result in corruption of process memory, potentially leading to further exploitation.