The issue was addressed with improved input validation. This issue is fixed in tvOS 26, watchOS 26, iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, visionOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
https://support.apple.com/en-us/125636
https://support.apple.com/en-us/125116
https://support.apple.com/en-us/125115
https://support.apple.com/en-us/125114
https://support.apple.com/en-us/125108
http://seclists.org/fulldisclosure/2025/Sep/58
http://seclists.org/fulldisclosure/2025/Sep/57
http://seclists.org/fulldisclosure/2025/Sep/56