Product:
macOS
Summary
The issue was addressed with improved bounds checks. A buffer overflow may result in memory corruption and unexpected app termination. This issue is fixed in macOS Tahoe 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2026-28842 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By manipulating the buffer, the attacker can cause memory corruption, leading to unexpected behavior or termination of applications. User interaction is required to trigger the exploit, making it necessary for the attacker to convince the user to execute a malicious payload.
Affected Products
- macOS Tahoe 26.4: Fixed the buffer overflow issue with improved bounds checks.
Mitigation
To mitigate this vulnerability, users should update to macOS Tahoe 26.4 or later. Regularly applying security updates and patches is essential to protect against known vulnerabilities. Users should also be cautious about executing untrusted applications or files.