Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
An out-of-bounds access issue was addressed with improved bounds checking. Processing an audio stream in a maliciously crafted media file may terminate the process. This issue affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-20690 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious media file that, when processed, triggers the out-of-bounds access. This requires the victim to interact with the media file, such as playing it on their device, which could lead to a process termination and potential denial of service.
Affected Products
- iOS 18.7.7
- iPadOS 18.7.7
- macOS Sequoia 15.7.5
- macOS Sonoma 14.8.5
- macOS Tahoe 26.4
- tvOS 26.4
- visionOS 26.4
- watchOS 26.4
Mitigation
Users are advised to update their devices to the latest versions of the operating systems to mitigate this vulnerability. Regularly applying software updates can help protect against known vulnerabilities and improve overall security.