Apple has released a series of software updates today, patching a critical security vulnerability that the company says may have been actively exploited. The updates include iOS 18.6.2 for iPhone, iPadOS 18.6.2 for iPad, and updates for macOS.
The vulnerability resides in the ImageIO framework, which is responsible for processing images across Apple's operating systems. According to a security support document released by Apple, processing a malicious image file could lead to memory corruption. The company confirmed it is aware of a report that the issue "may have been exploited in an extremely sophisticated attack against specific targeted individuals."
The vulnerability is tracked as CVE-2025-43300. Apple says it addressed the out-of-bounds write issue with improved bounds checking.
The patch is included in iOS 18.6.2 and iPadOS 18.6.2. Apple also addressed the vulnerability in macOS Sequoia 15.6.1 and macOS Ventura 13.7.8. Given that Apple has confirmed this vulnerability may have been exploited, users are advised to update their devices as soon as possible.