Product:
Xcode
Summary
An out-of-bounds read was addressed with improved bounds checking. This issue may allow an app to cause unexpected system termination. The fix is included in Xcode 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28890 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious app that triggers the out-of-bounds read condition. This app would require user interaction to be installed and executed on the target system, leading to potential system termination.
Affected Products
- Xcode: Affected version allows for out-of-bounds read, leading to unexpected system termination.
Mitigation
Users are advised to update to Xcode 26.4 or later to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities.