Product:
iOS
Summary
The issue was addressed with improved memory handling. Parsing a maliciously crafted file may lead to an unexpected app termination. This vulnerability affects multiple Apple operating systems, including iOS and macOS versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-20657 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious file and deliver it over a network. When the targeted device attempts to parse this file, it may lead to an unexpected termination of the application, potentially disrupting services or causing data loss.
Affected Products
- iOS 18.7.7 – Affected by memory handling issues leading to app termination.
- iPadOS 18.7.7 – Similar vulnerabilities as iOS, affecting app stability.
- macOS Sequoia 15.7.5 – Vulnerable to the same memory handling issues.
- macOS Sonoma 14.8.5 – Also affected by the parsing of malicious files.
Mitigation
Users are advised to update their devices to the latest versions of iOS, iPadOS, and macOS to mitigate this vulnerability. Regularly applying software updates can help protect against known vulnerabilities and improve overall device security.