Apple Releases iOS 18.6.2 Repair Security Locks, iPhone Users Must Download

iOS 18.6.2 update for serious security vulnerabilities

Apple has just released the latest update for the iOS operating system, iOS 18.6.2. This update was released to iPhone users around the world, having previously released versions of iOS 18.6.1 and iOS 18.6 in a short period of time.

The iOS 18.6.2 update is specifically aimed at patching a malicious security vulnerability with the code “CVE-2025-43300”. This gap can affect the image/io system on an iPhone device, which is in charge of reading or storing various image formats. With this gap, the image reading system can be damaged and cause errors in the memory that stores the image.

What is Memory Corruption?

Memory Corruption is a term used to describe situations where data in computer memory is no longer functioning properly. Global Cybersecurity Advisor from ESET, Jake Moore, explained that memory corruption can make the system work abnormally. In this case, hackers can insert malicious code that has an impact on the user’s device, it can even make many applications not functioning as usual.

Jake Moore did not mention the full details about the possible dangers, but generally hackers can jam the device, hijack the phone, track location, or steal user data via malicious code inserted in the device.

Zero-click attack: danger threatening

This security gap can be exploited by hackers through “zero-click” attacks. In this method, hackers can send messages containing images that have been infiltrated by malicious code via iMessage or WhatsApp. Users do not need to click on any link because the image will be directly stored in memory even if it is not opened or clicked.

The VP Strategy of Hackuity, Sylvain Cortes, said that this kind of attack is very dangerous for public or industry workers who manage sensitive data. Data stolen through memory corruption can be used in spyware campaigns that usually involve state actors. He suggested that organizations in the fields of law, media, and the public sector immediately update their devices.

The gap has been exploited

In Apple’s official records regarding iOS 18.6.2, the company acknowledges that this image/io gap has been exploited. Apple called the attacker carrying out “a very sophisticated attack targeting a particular individual”. Although Apple did not mention who was behind the attack, this became an important signal that users should update their devices immediately.

How to update the device

To update the device, iPhone users can visit the “Settings” menu > “General” > “Software Update”. There, users can press the “Update Now” button to update the device and patch the security hole with the code CVE-2025-43300.

This update applies to iPhones that support iOS 18, such as the iPhone XS or later. In addition, Apple also released updates for iPadOS and macOS. Namely iPadOS 18.6.2, iPadOS 17.7.10 for legacy iPad devices, and macOS sequoia 15.6.1 for Mac devices. These updates are also present to fix the same problem as mentioned above.