Product:
macOS, iOS, iPadOS
Summary
The issue was addressed with improved bounds checks. A malicious HID device may cause an unexpected process crash. This issue is fixed in macOS Sequoia, iOS, and iPadOS versions 18.7.5, and macOS Sonoma 14.8.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-46301 |
Exploitation
To exploit this vulnerability, an attacker would need to connect a malicious Human Interface Device (HID) to the target system. Once connected, the malicious device could trigger the vulnerability, leading to an unexpected crash of the process. User interaction is required for the attack to be successful, as the user must engage with the malicious device.
Affected Products
- macOS Sequoia: Fixed in version 15.7.4
- iOS: Fixed in version 18.7.5
- iPadOS: Fixed in version 18.7.5
- macOS Sonoma: Fixed in version 14.8.4
Mitigation
To mitigate this vulnerability, users should ensure that their devices are updated to the latest versions provided by Apple. Regularly checking for software updates and applying them promptly can help protect against potential exploits.