CVE-2025-46316
📋 TL;DR
An out-of-bounds read vulnerability in Apple Pages document processing could allow an attacker to cause unexpected termination or disclose process memory. This affects users who open malicious Pages documents on vulnerable Apple devices. The vulnerability impacts iOS, iPadOS, macOS, and the Pages application itself.
💻 Affected Systems
- iOS
- iPadOS
- macOS
- Pages
📦 What is this software?
Ipados by Apple
Macos by Apple
macOS is Apple's desktop and laptop operating system powering Mac computers used by millions of professionals, developers, creative professionals, and enterprise users worldwide. Built on a Unix foundation with the Darwin kernel and modern Cocoa frameworks, macOS delivers a seamless ecosystem integr...
Learn more about Macos →Pages by Apple
⚠️ Risk & Real-World Impact
Worst Case
Memory disclosure could expose sensitive information from the application's memory space, potentially including user data or system information.
Likely Case
Application crash or unexpected termination when processing a malicious document, leading to denial of service for the user.
If Mitigated
With proper patching, no impact as the vulnerability is fully addressed in updated versions.
🎯 Exploit Status
Exploitation requires user interaction to open a malicious Pages document. No public exploit code is known at this time.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, Pages 15.1
Vendor Advisory: https://support.apple.com/en-us/125632
Restart Required: Yes
Instructions:
1. Update iOS/iPadOS: Settings > General > Software Update. 2. Update macOS: System Settings > General > Software Update. 3. Update Pages: App Store > Updates tab. 4. Restart device after installation.
🔧 Temporary Workarounds
Disable automatic document opening
allConfigure system to not automatically open downloaded documents
Use alternative document viewers
allOpen Pages documents in alternative applications that are not vulnerable
🧯 If You Can't Patch
- Restrict opening Pages documents from untrusted sources
- Implement application whitelisting to control which applications can open documents
🔍 How to Verify
Check if Vulnerable:
Check current version against affected versions: iOS/iPadOS < 26.1, macOS < Tahoe 26.1, Pages < 15.1Check Version:
iOS/iPadOS: Settings > General > About. macOS: About This Mac > System Report > Software. Pages: Open Pages > Pages menu > About Pages.Verify Fix Applied:
Confirm version numbers: iOS/iPadOS ≥ 26.1, macOS ≥ Tahoe 26.1, Pages ≥ 15.1📡 Detection & Monitoring
Log Indicators:
- Application crash logs for Pages application
- Unexpected termination events in system logs
Network Indicators:
- Downloads of Pages documents from untrusted sources
SIEM Query:
source="system_logs" AND (process="Pages" AND event="crash") OR (process="Pages" AND event="terminated")