Particle.news

Download on the App Store

Apple Releases iOS 18.6.2, iPadOS 18.6.2 and macOS 15.6.1 to Patch Image File Zero-Day

The patch fixes CVE-2025-43300, an ImageIO flaw Apple says may have been used in extremely sophisticated targeted attacks.

Urgent iOS 18.6.2 patch blocks spyware hidden in images
Image
Apple
Image

Overview

  • Apple says processing a malicious image could corrupt memory, with security outlets noting such bugs can enable zero‑click or low‑interaction compromises.
  • Apple credited its own teams with finding the out‑of‑bounds write and resolved it by improving bounds checking (CVE-2025-43300).
  • The fixes ship across iOS 18.6.2, iPadOS 18.6.2, macOS Sequoia 15.6.1, plus legacy updates iPadOS 17.7.10, macOS 14.7.8 and macOS 13.7.8.
  • Eligible devices include iPhone XS and later and a wide range of recent iPad models, with Apple and security firms urging all users to install the updates immediately.
  • The releases contain no new features and arrive late in the iOS 18 cycle, with reporters noting they may be among the last maintenance updates before iOS 26.