Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
The issue was addressed with improved memory handling. Processing a maliciously crafted image may corrupt process memory. This vulnerability affects multiple Apple operating systems and can lead to significant security risks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28990 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious image and convincing a user to open it. Once the image is processed, it can lead to memory corruption, potentially allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- iOS 26.5: Affected by memory handling issues when processing images.
- iPadOS 26.5: Similar vulnerabilities as iOS, affecting image processing.
- macOS Sequoia 15.7.7: Vulnerable to memory corruption through crafted images.
- macOS Sonoma 14.8.7: Affected by the same image processing issues.
- macOS Tahoe 26.5: Vulnerable to memory handling issues.
- tvOS 26.5: Affected by the vulnerability in image processing.
- visionOS 26.5: Vulnerable to memory corruption through crafted images.
- watchOS 26.5: Affected by similar memory handling issues.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Apple has released updates that address the memory handling issues, and applying these updates will help protect against potential exploitation.