Product:
iOS, iPadOS, macOS
Summary
An integer overflow was addressed with improved input validation. This issue may allow an app to cause unexpected system termination. The vulnerability affects multiple Apple operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28952 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious application that triggers the integer overflow condition. Once the application is executed on a vulnerable device, it may lead to unexpected behavior or system termination, potentially allowing the attacker to disrupt services or gain unauthorized access.
Affected Products
- iOS 18.7.9 – Affected by integer overflow leading to unexpected termination.
- iPadOS 18.7.9 – Similar vulnerability as iOS, allowing for potential system disruption.
- macOS Sequoia 15.7.7 – Vulnerable to the same integer overflow issue.
- macOS Sonoma 14.8.7 – Also affected by the integer overflow vulnerability.
- macOS Tahoe 26.5 – Vulnerable to unexpected system termination due to this issue.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, and macOS as specified in the security updates. Regularly applying updates helps protect against known vulnerabilities and enhances overall system security.