Apple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks

Summary: Apple released security updates for various operating systems to address two actively exploited vulnerabilities. The flaws pertain to memory corruption in the Core Audio framework and a bypass issue in the RPAC component. Users are urged to update their devices to enhance security and mitigate risks.

Affected: Apple devices running iOS, iPadOS, macOS Sequoia, tvOS, and visionOS

Keypoints :

• Two vulnerabilities addressed: CVE-2025-31200 (7.5) and CVE-2025-31201 (6.8).
• Improvements include enhanced bounds checking and code removal for security.
• Since the beginning of the year, Apple has resolved five actively exploited zero-days.