Product:
Pages
Summary
An out-of-bounds read was addressed with improved input validation. This issue may lead to unexpected termination or disclosure of process memory when processing a maliciously crafted Pages document. The issue is fixed in iOS 26.1, iPadOS 26.1, and macOS Tahoe 26.1.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-46316 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious Pages document and entice a user to open it. Once the document is opened, the out-of-bounds read may occur, potentially leading to the disclosure of sensitive process memory or causing the application to terminate unexpectedly.
Affected Products
- iOS 26.1: The latest version of Apple’s mobile operating system.
- iPadOS 26.1: The latest version of Apple’s operating system for iPads.
- Pages 15.1: The word processing application from Apple.
- macOS Tahoe 26.1: The latest version of Apple’s desktop operating system.
Mitigation
Users are advised to update to the latest versions of iOS, iPadOS, and macOS to mitigate this vulnerability. Regularly updating applications and operating systems can help protect against potential exploits.