Act Now: Detection of Zero Click Vulnerability in Apple Devices

Zero click attack is the type of cyberattack that can be executed without any user interaction or awareness. The victim does not have to click or download anything for the attack to succeed. Apple has released security updates addressing a zero-click vulnerability which is being weaponised in their products. Users and administrators of affected Apple products are advised to update to the latest versions immediately.

CVE-2025-43300 is an out-of-bounds write vulnerability in Apple’s ImageIO framework. In other words, it is found in the part of the system that deals with pictures, which means every time your phone or computer opens, previews, or saves an image, this hidden system is at work. The flaw allows hackers to create a special “poisoned” image file that, if your device tries to process it, could make it crash or let the hacker secretly install harmful software. What makes it worrying is that you don’t even need to click on the image, just receiving it through an app, email, or website could be enough for the attack to work.

This happens because the system gets confused about where it’s storing information in memory. To put it simply, it’s like someone saying they’re giving you two boxes but only handing you one. When you try to open both, you end up opening the wrong space, which wasn’t meant for you. Hackers take advantage of this mistake to slip in their own instructions.