Apple plugs image-processing hole ripe for spyware abuse

Apple has released a batch of vulnerability fixes for iPhones, iPads, and Macs, including an image-processing flaw that experts say has the hallmarks of a spyware delivery vector. The most notable patch is for CVE-2026-65346, a defect in the ImageIO framework Apple uses to parse image files. Discovered and reported by Nik …

[may_i]

Expected

This is what software development on a budget looks like. If you are a competent programmer, you know that all external data must be rigorously validated. Even internal data - arguments to methods, etc must be validated as well.

Proper validation is the first thing which gets left out when management constrains the time and money devoted to software creation to maximise profits. What we get is software with enough holes in it that it can do a good impression of a colander.

[IGotOut]

Re: Expected

So you can, absolutely guarantee, that the multi-million lines of code you've seemingly written are completely and utterly free of bugs?

Willing to stake everything you own on that?

Thought not.

[Anonymous Coward]

Re: Expected

Ah yes, the classic "just don't have any bugs and therefore you'll have no bugs" argument.

I salute you sir, such insight and intellect is rare to behold.

[Tessier-Ashpool]

Re: Expected

The Apple bugs have been shaken out of the carpet in record numbers lately because… AI is proving to be very good at finding them.

In my hot-shot programming days, I solved assembly code bugs in my sleep. Literally. But even I wasn’t perfect.