Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A buffer overflow was addressed with improved bounds checking. This issue may allow an app to cause unexpected system termination. The vulnerability affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28959 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted network packets to the affected devices. If the application processes these packets without proper validation, it may lead to a buffer overflow, resulting in unexpected behavior or system termination.
Affected Products
- iOS 18.7.9 and earlier
- iPadOS 18.7.9 and earlier
- macOS Sequoia 15.7.7 and earlier
- macOS Sonoma 14.8.7 and earlier
- macOS Tahoe 26.5 and earlier
- tvOS 26.5 and earlier
- visionOS 26.5 and earlier
- watchOS 26.5 and earlier
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Regularly applying security updates is essential to protect against potential exploits.