Apple Rushes Zero-Day Fix With Direct Risk to Crypto Users

Apple has rolled out urgent security updates across iOS, iPadOS, and macOS, patching a zero-day vulnerability already being exploited in the wild.

The bug, tracked as CVE-2025-43300, affects the ImageIO framework, a system component that handles image processing across apps.

Zero-day in everyday images

According to Apple, a maliciously crafted image could trigger memory corruption and allow attackers to execute arbitrary code. Because ImageIO underpins standard tasks, such as viewing photos in messages, emails, or browsers, the attack vector is particularly accessible. Security analysts flagged the flaw as part of a highly targeted campaign against individuals. Apple addressed the issue by strengthening bounds checks in ImageIO.

Why crypto users should care

While the vulnerability is broad, it poses unique risks to cryptocurrency holders. Many users store sensitive information in images, screenshots of seed phrases, photos of recovery words, or even QR codes of wallet addresses. If compromised, such data provides attackers direct access to funds.

The danger is not theoretical. Research in 2025 documented mobile spyware families designed to scan device photo galleries with optical character recognition (OCR) to extract recovery phrases. Security firm Kaspersky highlighted examples like SparkCat and its successor SparkKitty, which were observed exfiltrating seed phrase images on both iOS and Android, even through apps distributed via official app stores. Clipboard hijacking, where malware swaps wallet addresses during transactions, remains another well-documented tactic.

Read More:

Fed Minutes Reveal Growing Focus on Stablecoins Under New U.S. Law

Updates now available

Apple’s emergency patches cover:

iOS 18.6.2 / iPadOS 18.6.2
macOS Sequoia 15.6.1
macOS Sonoma 14.7.8
macOS Ventura 13.7.8

Users are strongly advised to update immediately, especially those managing crypto wallets on mobile devices. Given the attack’s confirmed in-the-wild exploitation, delaying could expose personal assets to theft.

Source