CVEvulnerability
CVE-2026-86870
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-14
- Last modified
- 2026-09-18
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-122
Description
A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
Affected configurations
• apple ipados (< 26.7)
• apple iphone os (< 26.7)
• apple macos (< 27.0)
• apple visionos (< 27.0)
• apple watchos (< 27.0)
Related
Weakness · CWE (1)
- CWE-122 Heap-based Buffer Overflow weakness
References
- https://support.apple.com/en-us/149034 Vendor Advisory
- https://support.apple.com/en-us/149035 Vendor Advisory
- https://support.apple.com/en-us/149037 Vendor Advisory
- https://support.apple.com/en-us/149038 Vendor Advisory
- https://support.apple.com/en-us/149041 Vendor Advisory