Apple ImageIO Out-of-Bounds Write Vulnerability Leading to Denial-of-Service

A vulnerability in the ImageIO framework of Apple products, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, allows for a denial-of-service condition. This issue arises from an out-of-bounds write, which can be exploited by processing maliciously crafted files or images, leading to unexpected application termination.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by terminating the affected application.

Remediation

Users can update to the latest versions of iOS, iPadOS, macOS Sequoia, macOS Sonoma, tvOS, visionOS, or watchOS to address this vulnerability. Instructions for updating can be found on the Apple Support website.