Apple has rolled out emergency security updates to patch a newly discovered zero-day vulnerability that is already being exploited in targeted attacks.
The flaw, tracked as CVE-2025-43300, affects iPhones, iPads, and Macs.
According to Apple, the vulnerability exists in the Image I/O framework, which handles image processing across its platforms. The bug is an out-of-bounds write issue that could allow attackers to execute malicious code simply by tricking users into processing a specially crafted image.
Devices Affected and Updates Released
Apple has pushed security fixes for multiple operating systems:
- iOS 18.6.2 and iPadOS 18.6.2
- iPadOS 17.7.10 (for older devices)
- macOS Sequoia 15.6.1
- macOS Sonoma 14.7.8
- macOS Ventura 13.7.8
Users are strongly advised to install these updates immediately, as Apple confirmed the vulnerability “may have been exploited in an extremely sophisticated attack against specific individuals.”
Why It Matters
This is the sixth zero-day vulnerability Apple has patched in 2025 alone, showing an ongoing trend of advanced cyberattacks targeting Apple devices. Security experts warn that even everyday users could be at risk if attackers decide to expand their campaigns.
What You Should Do
If you own an iPhone, iPad, or Mac:
- Go to Settings → General → Software Update (on iOS/iPadOS).
- On macOS, go to System Settings → Software Update.
- Install the latest version immediately.
Keeping your devices updated is the most effective way to stay protected from these kinds of threats.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
⚠️ Security Tip: Never ignore Apple’s emergency updates. Zero-day flaws are often exploited before most users even know about them.
