Product:
iOS and iPadOS
Summary
A buffer overflow was addressed with improved bounds checking. This issue may allow a remote attacker to cause a denial-of-service. The vulnerability has been fixed in the latest versions of iOS and iPadOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28875 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted network packets to the affected devices. If successful, this could lead to a denial-of-service condition, impacting the availability of the device. The attack requires low complexity and does not necessitate user interaction.
Affected Products
- iOS: Affected by the buffer overflow vulnerability, leading to potential denial-of-service.
- iPadOS: Similar vulnerability as iOS, also allowing for denial-of-service attacks.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS and iPadOS where the issue has been addressed. Regularly applying updates is crucial for maintaining device security.