Product:
Keynote
Summary
The issue was addressed with improved bounds checks. Processing a maliciously crafted Keynote file may disclose memory contents. This vulnerability could lead to unauthorized access to sensitive information stored in memory.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-46306 |
Exploitation
To exploit this vulnerability, an attacker must create a specially crafted Keynote file and convince a user to open it on their device. Once opened, the malicious file can trigger the vulnerability, potentially allowing the attacker to access sensitive memory contents.
Affected Products
- macOS Tahoe: Affected version includes improvements in bounds checks to prevent memory disclosure.
- Keynote: The application is vulnerable to crafted files that may disclose memory contents.
- iOS: The operating system is impacted by this vulnerability when processing malicious Keynote files.
- iPadOS: Similar to iOS, this version is also affected by the vulnerability in Keynote.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest versions of Keynote and their operating systems. Regularly updating software can help protect against known vulnerabilities and reduce the risk of exploitation.