Product:
macOS, iOS, iPadOS
Summary
The issue was addressed with improved bounds checks. A malicious HID device may cause an unexpected process crash. This issue is fixed in macOS Sequoia, iOS, and iPadOS versions 18.7.5, and macOS Sonoma 14.8.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-46304 |
Exploitation
To exploit this vulnerability, an attacker would need to connect a malicious Human Interface Device (HID) to the target system. Once connected, the device could trigger the vulnerability, leading to an unexpected crash of the process. User interaction is required to initiate the exploit, making it necessary for the attacker to have physical access to the device.
Affected Products
- macOS Sequoia: Fixed in version 15.7.4
- iOS: Fixed in version 18.7.5
- iPadOS: Fixed in version 18.7.5
- macOS Sonoma: Fixed in version 14.8.4
Mitigation
To mitigate this issue, users should ensure that their devices are updated to the latest versions provided by Apple. Regularly checking for software updates and applying them promptly can help protect against this and other vulnerabilities.