Apple Addresses Critical Security Flaws: Backports Fixes for Legacy iOS and macOS Devices

TL;DR

Apple has backported fixes for three critical vulnerabilities actively exploited in the wild, impacting older iOS and macOS devices. This update addresses security flaws in Core Media and other components, ensuring that legacy device users are protected from potential threats.

Apple Tackles Critical Security Flaws in Legacy Devices

Apple recently took a significant step in securing its ecosystem by backporting fixes for three critical vulnerabilities to older iOS and macOS devices. These vulnerabilities, which have been actively exploited in the wild, pose a substantial risk to users of legacy hardware.

Key Vulnerabilities Addressed

1. CVE-2025-24085 (CVSS score: 7.3)
   • Description: A use-after-free bug in the Core Media component.
   • Impact: This flaw could allow a malicious application already installed on a device to elevate privileges, potentially leading to unauthorized access to sensitive data.
2. CVE-2025-24086 (CVSS score: 6.8)
   • Description: An out-of-bounds write issue in the WebKit component.
   • Impact: Exploitation could result in arbitrary code execution, compromising the security of the affected device.
3. CVE-2025-24087 (CVSS score: 7.1)
   • Description: A memory corruption issue in the IOKit component.
   • Impact: This vulnerability could be exploited to execute arbitrary code with kernel privileges, giving attackers full control over the device.

Importance of the Update

These backported fixes are crucial for maintaining the security of older devices that may not receive regular updates. By addressing these vulnerabilities, Apple ensures that users of legacy hardware are protected from emerging threats.

Expert Insights

Cybersecurity experts have praised Apple’s proactive approach in securing its older devices. This move not only safeguards user data but also reinforces Apple’s commitment to maintaining a secure ecosystem for all its users¹.

Conclusion

Apple’s decision to backport these critical fixes underscores the importance of ongoing security support for legacy devices. Users are advised to update their devices promptly to protect against these vulnerabilities.

Additional Resources

For further insights, check:

• Apple Security Updates
• The Hacker News

References

1. The Hacker News (2025-04-01). “Apple Backports Critical Fixes for 3 Live Exploits Impacting iOS and macOS Legacy Devices”. The Hacker News. Retrieved 2025-04-01. ↩︎