Product:
iOS, iPadOS, macOS, tvOS, visionOS
Summary
The issue was addressed with improved memory handling. Processing a maliciously crafted image may corrupt process memory. This vulnerability could lead to unauthorized access to sensitive information.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28940 |
Exploitation
An attacker can exploit this vulnerability by sending a specially crafted image to the target device. If the image is processed, it may lead to memory corruption, allowing the attacker to potentially gain access to sensitive data or execute arbitrary code.
Affected Products
- iOS 18.7.9 – Latest version with improved memory handling.
- iPadOS 18.7.9 – Latest version with improved memory handling.
- macOS Sequoia 15.7.7 – Latest version with improved memory handling.
- macOS Tahoe 26.5 – Latest version with improved memory handling.
- tvOS 26.5 – Latest version with improved memory handling.
- visionOS 26.5 – Latest version with improved memory handling.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, and visionOS. Regularly applying security updates is crucial to protect against potential exploits.