CVE-2025-46306

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2026-01-28

Last updated on: 2026-03-25

Assigner: Apple Inc.

Description

The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing a maliciously crafted Keynote file may disclose memory contents.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-28

Last Modified

2026-03-25

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-04

NVD

CVE-2025-46306

EUVD

EUVD-2025-206471

Affected Vendors & Products

Vendor	Product	Version / Range
apple	keynote	to 15.1 (exc)
apple	ipados	to 26.0 (exc)
apple	iphone_os	to 26.0 (exc)
apple	macos	to 26.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper bounds checks when processing Keynote files. A maliciously crafted Keynote file can cause the software to disclose memory contents, potentially exposing sensitive information. The issue has been fixed in macOS Tahoe 26, Keynote 15.1, iOS 26, and iPadOS 26.

Impact Analysis

If exploited, this vulnerability can lead to the disclosure of memory contents, which may include sensitive or confidential information. This could compromise the security and privacy of your data when opening malicious Keynote files.

Mitigation Strategies

To mitigate this vulnerability, update your devices to the fixed versions: macOS Tahoe 26, Keynote 15.1, iOS 26, or iPadOS 26. Avoid opening untrusted or suspicious Keynote files until the update is applied.

Hi! I’m here to help you understand CVE-2025-46306. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70