Product:
macOS
Summary
An integer overflow was addressed with improved input validation. This issue may lead to heap corruption when processing a maliciously crafted string. The issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-20639 |
Exploitation
To exploit this vulnerability, an attacker can send a specially crafted string over the network to a vulnerable macOS system. If the system processes this string without proper validation, it may result in heap corruption, potentially allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- macOS Sequoia 15.7.5 – Fixed version addressing the integer overflow issue.
- macOS Sonoma 14.8.5 – Updated to improve input validation and mitigate the vulnerability.
- macOS Tahoe 26.3 – Includes the necessary fixes for the heap corruption issue.
Mitigation
Users are advised to update their macOS systems to the latest versions to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploits and ensure system integrity.