Product:
iOS, iPadOS, macOS Tahoe, tvOS
Summary
A null pointer dereference was addressed with improved input validation. This issue may allow an attacker on the local network to cause a denial-of-service. The vulnerability has been fixed in the latest versions of the affected products.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-28985 |
Exploitation
To exploit this vulnerability, an attacker must be on the local network and can trigger the null pointer dereference by sending specially crafted input to the affected devices. This can lead to a denial-of-service condition, impacting the availability of the services on the device.
Affected Products
- iOS: Affected by the null pointer dereference issue, leading to potential denial-of-service.
- iPadOS: Similar vulnerability as iOS, allowing local network attackers to disrupt service.
- macOS Tahoe: Vulnerable to the same issue, requiring local network access for exploitation.
- tvOS: Also affected, with the potential for denial-of-service attacks from local network users.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS Tahoe, and tvOS. Regularly applying updates will help protect against this and other vulnerabilities.