Apple Products Use-After-Free Vulnerability in Audio Processing

A use-after-free vulnerability has been identified in multiple Apple products, including iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, and watchOS 26.4. This vulnerability allows an application to process maliciously crafted web content, potentially leading to an unexpected crash of the application or termination of a system process. The issue arises from improper memory management, where an application may exploit the vulnerability to access freed memory, causing a crash or allowing the application to manipulate kernel memory.

Impact

Exploitation of this vulnerability can lead to unexpected application termination or system crashes, with the potential for unauthorized access to kernel memory.

Remediation

Users can update to iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, or watchOS 26.4 to address this vulnerability.