Introduction
On 20 August 2025, Apple quietly rolled out emergency security patches for iOS, iPadOS and macOS. These updates iOS 18.6.2, iPadOS 18.6.2 (plus 17.7.10 for some older pads), macOS Sequoia 15.6.1, Sonoma 14.7.8 and Ventura 13.7.8 don’t include flashy new features. Instead, they fix a serious zero‑day vulnerability that’s already been exploited in the wild. Users are strongly urged to install these updates immediately.
What’s the Issue? CVE‑2025‑43300 in the ImageIO Framework
The vulnerability CVE‑2025‑43300 is located in Apple’s ImageIO framework, responsible for handling image files across the operating system. Specifically, it’s an out‑of‑bounds write flaw, which means that if a maliciously crafted image is processed, the code may write data beyond its intended memory area. This can result in memory corruption, system crashes, or even remote code execution.
Worryingly, Apple has confirmed that this vulnerability may have already been exploited in extremely sophisticated attacks, targeted at specific individuals. That suggests these were not random mass assaults but rather precision strikes—possibly by nation‑state actors or advanced cyber‑espionage groups.
Affected Devices and Versions
The security fixes were bundled into the following updates released on 20 August 2025:
- iOS 18.6.2 and iPadOS 18.6.2 – for:
- iPhone XS and later
- iPad Pro 13‑inch; 12.9‑inch (3rd gen and later); 11‑inch (1st gen and later)
- iPad Air 3rd gen and later; iPad (7th gen and later); iPad mini 5th gen and later
- iPadOS 17.7.10 – for older iPad models such as iPad Pro 12.9 (2nd gen), iPad Pro 10.5, and iPad 6th gen
- macOS Sequoia 15.6.1, Sonoma 14.7.8, and Ventura 13.7.8 – patched for Mac users on these platforms.
These updates strictly address the memory‑corruption vulnerability by reinforcing bounds checking in the ImageIO framework. There’s no mention of additional features or enhancements.
Why It Matters: Sophisticated Exploits in the Wild
This is the sixth zero‑day vulnerability Apple has patched in 2025 alone a trend underscoring growing threats to even the most secure platforms.
Security analysts warn that these kinds of vulnerabilities are favourite targets of state‑sponsored spyware operations. Similar exploits previously linked to Pegasus-style tools have been deployed against high‑value targets such as journalists, dissidents and government officials.
This isn’t the time to delay ignoring such updates leaves your device vulnerable to highly targeted threats.
How to Update Your Devices
The process to update is identical for iPhone, iPad and Mac:
- On iPhone or iPad:
- Go to Settings → General → Software Update
- If iOS 18.6.2 or iPadOS 18.6.2 shows up, tap Update Now
- On Mac:
- Launch System Settings → General → Software Update
- If the relevant macOS update (Sequoia 15.6.1, Sonoma 14.7.8, or Ventura 13.7.8) is available, click Update Now
Alternatively, ensure automatic system updates are enabled so that critical patches like this are applied promptly.
What This Update Does and Does Not Include
Unlike iOS 18.6 (released earlier in August, which included 24 security fixes and small bug improvements), this release is purely defensive. It offers no new features, enhancements or user‑interface tweaks just a focussed fix to close the dangerous hole in ImageIO.
Hence, if you’re disappointed you can’t test out cool new functionalities, rest assured: this update stays behind the scenes, performing essential system-level repairs.
The Bigger Picture: Stay Vigilant in a Risky World
- Zero‑days are rare and serious: These are vulnerabilities unknown to developers until exploited. Apple’s swift action highlights both the severity and the increasing frequency of such threats.
- Act now, don’t wait: With active exploitation, every minute without the patch is an opportunity for attackers.
- Keep all devices patched: In today’s interconnected ecosystem of apps, services, and messaging platforms, unpatched devices can expose more than just themselves.
- Consider workplace risk: Especially if you’re in sectors like journalism, law, or politics universally targeted for surveillance ensure organisation‑wide compliance with update policies.
Final Word
In summary:
- Apple released a critical security update on 20 August 2025 to patch CVE‑2025‑43300, a zero‑day vulnerability in the ImageIO framework.
- The flaw posed a serious threat already exploited in targeted attacks and was addressed via improved memory-bound checking.
- Updates span iOS 18.6.2, iPadOS 18.6.2 / 17.7.10, and macOS Sequoia 15.6.1, Sonoma 14.7.8, Ventura 13.7.8.
- There are no new features just vital security improvements.
- Users must update immediately to close the exploit door.