Multiple Security Vulerabilities Found In Apple's Disk Image Software - MacRumors
Skip to Content

Multiple Security Vulerabilities Found In Apple's Disk Image Software

The "Month of Kernel Bugs" project has found two unpatched security vulnerabilities in the way Mac OS X handles .dmg files.

The first vulnerability, rated "highly critical" by security-firm Secunia, can lead to privilege escalation, denial of service, and system access by a remote user (if Safari's open "safe" files option is checked).

The second issue is similar in nature, in that a corrupted UDTO HFS+ .dmg (ex. bad sectors) can lead to a denial of service condition.

A workaround for both issues is to disable Safari's option to open "safe" files after downloading, and to not open any .dmg file from a source you do not trust.

The latest findings increase the total to four security bugs found in Apple's software since the beginning of the project this month (See also: Airport Driver Exploit , fpathconf() Exploit ). The project has also targeted Windows, Linux, and other popular BSD distributions, with a stated goal to "check how many unreported and unknown issues can be found in kernel code out there, using simple, yet effective tools deploying techniques such as fuzzing and 'stress testing'."

Popular Stories

iPhone 18 Pro Deep Red Feature

iPhone 18 Pro Launching in Two Months With These 12 New Features

Friday July 24, 2026 7:26 pm PDT by
It is now late July, and that means the iPhone 18 Pro and iPhone 18 Pro Max are less than two months away. The devices are expected to look similar to the iPhone 17 Pro and iPhone 17 Pro Max, but there will still be many year-over-year changes, with rumored features including a smaller Dynamic Island, 5G via satellite, and more. Apple is expected to unveil the iPhone 18 Pro, iPhone 18 Pro...
Apple Intelligence Comes Under Fire Feature

Apple Will 'Watch Everything Burn' When AI Bubble Bursts - Ed Zitron

Monday July 27, 2026 7:11 am PDT by
Memory prices have doubled, Macs and iPads have gone up, and iPhones are expected to follow. Ed Zitron – who writes the Where's Your Ed At newsletter, hosts the Better Offline podcast, and has been described by Politico as the AI boom's most "acerbic gadfly" – has spent years arguing the buildout driving those costs will never pay for itself. We asked him what happens to Apple if he's...
iPhone 18 Pro and Pro Max Feature

'Apple Upgrade' Program Launching on Tuesday

Sunday July 26, 2026 8:20 am PDT by
Update — July 28: Apple Upgrade has officially launched. In his newsletter today, Bloomberg's Mark Gurman reiterated that a new "Apple Upgrade" program is set to launch in the U.S. on Tuesday, July 28. Apple will stop accepting iPhone Upgrade Program sign-ups on the same day, but he said customers who are already enrolled will be able to remain in the program "for the time being." ...