Apple CoreGraphics Flaw Prompts Security Updates After Targeted Attacks

Apple has released security updates to address an Apple CoreGraphics flaw that may have helped attackers target specific iOS users. The vulnerability can allow malicious files to trigger arbitrary code execution, according to the company’s security notice.

Malicious Files Can Trigger Code Execution

CoreGraphics handles graphics, image rendering and text drawing across several Apple operating systems.

The vulnerability involves an out-of-bounds write, which occurs when software writes data beyond its intended memory boundary. This can corrupt information, crash applications or potentially allow an attacker’s code to run.

In this case, Apple says processing a specially crafted file could lead to arbitrary code execution.

The company credited Meta Product Security with discovering the weakness. It also said the fix improves bounds checking to prevent the unsafe memory operation.

Apple Reports Possible Exploitation Against Selected Users

According to Apple, the vulnerability may have featured in an extremely sophisticated attack against specific individuals.

The company’s notice refers to attacks involving versions of iOS released before iOS 27. However, it does not identify the targets or the attackers.

The disclosure describes targeted activity rather than a confirmed widespread campaign. Nevertheless, the underlying weakness affects devices used by a much broader audience.

Updates Cover iPhones, iPads and Macs

The reported fixes arrive in iOS 26.7.1, iPadOS 26.7.1, macOS Tahoe 26.7.1 and macOS Sequoia 15.8.1.

The listed iPhone and iPad models include:

• iPhone 11 and later
• iPad Pro 12.9-inch, third generation and later
• iPad Pro 11-inch, first generation and later
• iPad Air, third generation and later
• iPad, eighth generation and later
• iPad mini, fifth generation and later

Meanwhile, the macOS updates address the issue for Macs using the relevant operating system branches.

Although Apple’s exploitation warning concerns iOS, the fixes also cover the affected CoreGraphics component on iPadOS and macOS.

Security Fix Addresses the Underlying Weakness

The Apple CoreGraphics flaw demonstrates how a file-processing vulnerability can create an opportunity for code execution.

Apple’s update changes how the framework checks memory boundaries when handling data. Consequently, the fix addresses the software weakness rather than relying on users to identify a malicious file.

Users with affected devices should install the applicable security update promptly. The targeted nature of the reported attacks does not remove the value of patching other vulnerable devices.