Apple Inc. has urgently released a security update to address a critical zero-day vulnerability, identified as CVE-2025-43300, that was being actively exploited in targeted attacks, particularly against cryptocurrency users. This flaw involved an out-of-bounds write issue in the ImageIO framework, allowing attackers to execute arbitrary code through specially crafted image files. The vulnerability has been patched on several Apple platforms, including macOS Sonoma, macOS Ventura, iPadOS, and iOS. Apple confirmed the flaw was used in sophisticated attacks targeting specific individuals.
The zero-click nature of the vulnerability, which requires no user interaction, is particularly concerning for cryptocurrency users. Malicious images sent via iMessage could be automatically processed, potentially compromising devices and granting attackers access to sensitive wallet data. Cybersecurity experts warn of the broader implications for the digital ecosystem, as the ImageIO framework is crucial for reading and writing image file formats on Apple devices.
The Cybersecurity and Infrastructure Security Agency (CISA) has included this vulnerability in its Known Exploited Vulnerabilities catalog, urging organizations to apply mitigations by September 2025. Apple emphasizes the importance of immediate updates to prevent exploitation and has provided detailed technical documentation on the vulnerability.
Experts advise users, especially those who may have been targeted, to secure personal data and consider migrating to new wallet keys if any compromise is detected. This incident underscores the critical need for timely software updates and robust security practices, highlighting the growing intersection between cybersecurity and cryptocurrency.
