Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A buffer overflow was addressed with improved input validation. A local user may be able to cause unexpected system termination or read kernel memory. This issue affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-28897 |
Exploitation
To exploit this vulnerability, an attacker with local access could potentially manipulate input data to trigger the buffer overflow, leading to unexpected behavior such as system crashes or unauthorized access to kernel memory. This requires the attacker to have physical access to the device.
Affected Products
- iOS 18.7.9 and earlier
- iPadOS 18.7.9 and earlier
- macOS Sequoia 15.7.7 and earlier
- macOS Sonoma 14.8.7 and earlier
- macOS Tahoe 26.5 and earlier
- tvOS 26.5 and earlier
- visionOS 26.5 and earlier
- watchOS 26.5 and earlier
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems as soon as possible. Regularly applying updates can help protect against known vulnerabilities.