CVE-2025-46306: Keynote Information Disclosure Vulnerability

CVE-2025-46306 Overview

CVE-2025-46306 is an out-of-bounds read vulnerability affecting Apple Keynote, macOS Tahoe, iOS, and iPadOS. The vulnerability stems from insufficient bounds checking when processing Keynote presentation files. An attacker can craft a malicious Keynote file that, when opened by a victim, can disclose sensitive memory contents from the affected application or system.

Critical Impact

Processing a maliciously crafted Keynote file may allow unauthorized disclosure of memory contents, potentially exposing sensitive information stored in memory.

Affected Products

• macOS Tahoe (versions prior to 26)
• Keynote (versions prior to 15.1)
• iOS and iPadOS (versions prior to 26)

Discovery Timeline

• 2026-01-28 - CVE CVE-2025-46306 published to NVD
• 2026-01-29 - Last updated in NVD database

Technical Details for CVE-2025-46306

Vulnerability Analysis

This vulnerability is classified as CWE-125 (Out-of-Bounds Read), a memory corruption issue that occurs when an application reads data beyond the boundaries of an allocated memory buffer. In the context of Keynote file processing, the application fails to properly validate input data boundaries when parsing certain elements within a Keynote presentation file.

When a user opens a specially crafted Keynote file, the parser attempts to read memory locations outside the intended buffer. This can result in the disclosure of sensitive information that may be stored in adjacent memory regions, including application data, cryptographic keys, or other confidential information.

The attack requires local access and user interaction—specifically, a victim must be convinced to open a malicious Keynote file. This could be achieved through phishing campaigns, malicious email attachments, or compromised file-sharing services.

Root Cause

The root cause is improper bounds checking in the Keynote file parsing logic. When processing certain data structures within a Keynote presentation, the application did not adequately verify that read operations remained within the bounds of allocated memory buffers. This allows carefully crafted input to trigger read operations beyond legitimate buffer boundaries.

Attack Vector

The attack vector is local, requiring user interaction to execute. An attacker would need to:

1. Create a maliciously crafted Keynote presentation file containing specially formatted data designed to trigger the out-of-bounds read condition
2. Deliver the malicious file to a potential victim through social engineering tactics such as email phishing, malicious downloads, or compromised file-sharing platforms
3. Convince the victim to open the malicious Keynote file using Keynote on an affected system

Upon opening the file, the vulnerable parsing routine processes the malicious data, causing memory contents to be read beyond intended boundaries. The disclosed memory data could then be exfiltrated or embedded within the processed document output.

The vulnerability mechanism involves improper validation of data lengths and offsets when parsing Keynote file structures. For technical details on the specific parsing routines affected, refer to Apple Security Advisory 126254.

Detection Methods for CVE-2025-46306

Indicators of Compromise

• Unusual Keynote file processing behavior or application crashes when opening presentation files
• Unexpected memory access patterns in Keynote application logs
• Suspicious Keynote files received from untrusted sources with unusual file structures
• Evidence of data exfiltration following Keynote file access

Detection Strategies

• Monitor file system activity for Keynote files (.key extension) received from external sources
• Implement endpoint detection rules to identify abnormal memory access patterns in Keynote processes
• Deploy email filtering solutions to scan and quarantine suspicious Keynote attachments
• Utilize SentinelOne's behavioral AI to detect exploitation attempts during file processing

Monitoring Recommendations

• Enable detailed logging for Keynote application activity on managed endpoints
• Configure alerts for unusual Keynote process behavior such as unexpected memory access or crashes
• Monitor network traffic for potential data exfiltration following Keynote file access
• Implement file integrity monitoring to detect delivery of malicious Keynote files

How to Mitigate CVE-2025-46306

Immediate Actions Required

• Update macOS to Tahoe version 26 or later
• Update Keynote to version 15.1 or later
• Update iOS and iPadOS devices to version 26 or later
• Advise users to avoid opening Keynote files from untrusted or unknown sources

Patch Information

Apple has addressed this vulnerability with improved bounds checks in the affected products. Security updates are available through the following Apple Security Advisories:

• Apple Security Advisory 125108 - iOS and iPadOS security update
• Apple Security Advisory 125110 - macOS Tahoe security update
• Apple Security Advisory 126254 - Keynote security update

Organizations should prioritize patching devices that frequently process Keynote files from external sources.

Workarounds

• Quarantine all Keynote files received from external sources until they can be scanned and verified
• Use alternative presentation software for viewing untrusted files until patches can be applied
• Implement strict email attachment policies to block or sandbox Keynote files from unknown senders
• Deploy network-level filtering to prevent automatic download of Keynote files from untrusted domains

# Configuration example
# Block Keynote file attachments at the mail gateway until patches are applied
# Example mail filter rule (syntax varies by platform)
# reject_attachment_type: application/x-iwork-keynote-sffkey
# reject_extension: .key

# For managed macOS devices, force software update via MDM
sudo softwareupdate --install --all --restart