Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
An out-of-bounds write issue was addressed with improved input validation. This issue may allow an app to cause unexpected system termination or write kernel memory. The issue has been fixed in several versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28972 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious application that triggers the out-of-bounds write condition. By sending specially crafted input to the application, the attacker may be able to manipulate memory and cause unexpected behavior, potentially leading to system crashes or unauthorized access to kernel memory.
Affected Products
- iOS 18.7.9 and earlier
- iPadOS 18.7.9 and earlier
- macOS Sequoia 15.7.7 and earlier
- macOS Sonoma 14.8.7 and earlier
- macOS Tahoe 26.5 and earlier
- tvOS 26.5 and earlier
- visionOS 26.5 and earlier
- watchOS 26.5 and earlier
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Regularly applying security updates can help protect against potential exploits and ensure that any known vulnerabilities are addressed.