TLDR InfoSec · ATTACKS & VULNERABILITIES
APPLE PATCHES CVE-2025-43300 ZERO-DAY IN IOS, IPADOS, AND MACOS EXPLOITED IN TARGETED ATTACKS
Summary from the TLDR InfoSec newsletter
Apple has patched CVE-2025-43300, a zero-day exploit in the ImageIO framework that causes memory corruption via malicious images. It affected iOS 18.6.2, iPadOS 18.6.2/17.7.10, and macOS Ventura 13.7.8, Sonoma 14.7.8, and Sequoia 15.6.1. This is Apple's seventh zero-day patch in 2025.