Apple Patches Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks

Apple has released security updates for iOS, iPadOS, and macOS to fix a zero-day vulnerability that it says has been actively exploited in the wild. The flaw, tracked as CVE-2025-43300 with a CVSS score of 8.8, is an out-of-bounds write in the ImageIO framework that can cause memory corruption when a malicious image is processed. Apple said it was aware of a report that the issue may have been used in an extremely sophisticated attack against specific targeted individuals, and that it was fixed with improved bounds checking. With this update, Apple has fixed seven zero-days exploited in real-world attacks so far this year.