Product:
watchOS, tvOS, macOS, iOS, iPadOS, visionOS
Summary
The issue was addressed with improved memory handling. Processing a maliciously crafted image may result in disclosure of process memory. This vulnerability affects multiple Apple operating systems and requires user interaction to exploit.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-20634 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious image and convince a user to open it on a vulnerable device. Once the image is processed, it may lead to the disclosure of sensitive process memory, potentially exposing confidential information.
Affected Products
- watchOS 26.3
- tvOS 26.3
- macOS Tahoe 26.3
- macOS Sonoma 14.8.4
- macOS Sequoia 15.7.4
- iOS 18.7.5
- iPadOS 18.7.5
- visionOS 26.3
- iOS 26.3
- iPadOS 26.3
Mitigation
Users are advised to update their devices to the latest versions of the affected operating systems to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploits.