Product:
iOS, iPadOS, macOS
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue allows an app to potentially execute arbitrary code with kernel privileges. The vulnerability has been fixed in several versions of iOS, iPadOS, and macOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.4 | CVE-2026-28819 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious application that takes advantage of the out-of-bounds write issue. By executing this application on a vulnerable device, the attacker may gain kernel privileges, allowing them to execute arbitrary code and potentially compromise the system.
Affected Products
- iOS 18.7.9 – Fixed the out-of-bounds write issue.
- iPadOS 18.7.9 – Addressed the vulnerability with improved bounds checking.
- macOS Sequoia 15.7.7 – Resolved the issue to prevent arbitrary code execution.
- macOS Sonoma 14.8.7 – Mitigated the risk associated with the vulnerability.
- macOS Tahoe 26.5 – Updated to fix the out-of-bounds write issue.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, and macOS as specified in the security updates. Regularly applying updates helps protect against known vulnerabilities and enhances overall system security.