The issue was addressed with improved input validation. This issue is fixed in tvOS 26, watchOS 26, iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, visionOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ipados | Apple | * | 26.0 (excluding) |
| Iphone_os | Apple | * | 26.0 (excluding) |
| Macos | Apple | * | 26.0 (excluding) |
| Tvos | Apple | * | 26.0 (excluding) |
| Visionos | Apple | * | 26.0 (excluding) |
| Watchos | Apple | * | 26.0 (excluding) |
References
- https://support.apple.com/en-us/125108
- https://support.apple.com/en-us/125114
- https://support.apple.com/en-us/125115
- https://support.apple.com/en-us/125116
- https://support.apple.com/en-us/125636
- http://seclists.org/fulldisclosure/2025/Sep/49
- http://seclists.org/fulldisclosure/2025/Sep/53
- http://seclists.org/fulldisclosure/2025/Sep/56
- http://seclists.org/fulldisclosure/2025/Sep/57
- http://seclists.org/fulldisclosure/2025/Sep/58