Apple Font Parser Vulnerability Allowing Memory Corruption Attacks

On September 30, 2025, Apple released a security update for macOS Sequoia 15.7.1 to address a critical vulnerability in its font parser, identified as CVE-2025-43400. This flaw allows a maliciously crafted font file to cause out-of-bounds writes, potentially leading to application crashes or memory corruption. Although there are no reports of active exploitation, the vulnerability could be exploited in conjunction with other bugs for remote code execution.

Users are advised to promptly install the update to secure their systems. The update also applies to various platforms, including iOS and iPadOS, and emphasizes the importance of caution when handling font files from untrusted sources.