Apple fixes zero-day flaw used in highly sophisticated attacks
Apple fixes CVE-2025-43300, an out-of-bounds write bug in iOS and iPadOS
The bug allowed threat actors to run remote code execution attacks
There is evidence of abuse in the wild, so users should be on their guard
Apple has fixed a bug in iOS and iPadOS which was apparently being used in “an extremely sophisticated attack against specific targeted individuals”.
In a security advisory, Apple said it fixed an out-of-bounds write issue it found in the ImageIO framework, which lets apps open, save, and work with image files efficiently, including reading details like EXIF data, or creating thumbnails.
An out-of-bounds bug happens when software mistakenly writes data beyond the memory area it was supposed to.
