Apple backports zero-day patches to older iPhones and iPads
ID: 8de6366c-811b-52a9-a281-cd2015fbd54d
STIX ID: report--8de6366c-811b-52a9-a281-cd2015fbd54d
Feed Name: Bleeping Computer
Threat Score
Apple released backported security updates to address a zero-day (CVE-2025-43300) — an out-of-bounds write in the Image I/O framework — exploited in "extremely sophisticated" targeted attacks; the flaw affected many older iPhone and iPad models and was reportedly chained with a WhatsApp zero-click vulnerability (CVE-2025-55177) in advanced spyware campaigns, prompting multiple coordinated patches across vendors.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.