Home Any version before 26
affected
Any version before 15.1
affected
Any version before 26
affected
Description
The issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26, Keynote 15.1, iOS 26 and iPadOS 26. Processing a maliciously crafted Keynote file may disclose memory contents.
Problem types
Processing a maliciously crafted Keynote file may disclose memory contents
Product status
References
support.apple.com/en-us/125108
support.apple.com/en-us/126254
support.apple.com/en-us/125110