Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
The issue was addressed with improved memory handling. Processing an audio stream in a maliciously crafted media file may terminate the process. This vulnerability affects multiple Apple operating systems and requires user interaction to exploit.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-39869 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious media file that, when processed by the affected Apple operating systems, can lead to a termination of the process. The attack requires the user to interact with the malicious file, making user awareness crucial in preventing exploitation.
Affected Products
- iOS 18.7.9
- iPadOS 18.7.9
- macOS Sequoia 15.7.7
- macOS Sonoma 14.8.7
- macOS Tahoe 26.5
- tvOS 26.5
- visionOS 26.5
- watchOS 26.5
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Regularly applying software updates can help protect against known vulnerabilities and improve overall security.