Apple ImageIO and CoreMedia Memory Handling Vulnerability Allowing Process Memory Disclosure

A vulnerability exists in the ImageIO and CoreMedia frameworks of multiple Apple operating systems, including macOS, iOS, iPadOS, watchOS, and tvOS. This vulnerability allows for the disclosure of process memory by processing maliciously crafted images or files. The issue arises from improper memory handling, which could lead to unintended memory access.

Impact

Exploitation of this vulnerability could result in unauthorized access to process memory, potentially allowing for the extraction of sensitive information.

Remediation

Users can update to the latest versions of macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5, iPadOS 18.7.5, watchOS 26.3, tvOS 26.3, and visionOS 26.3 to address this vulnerability.