Product:
iOS, iPadOS, macOS, tvOS
Summary
The issue was addressed with improved memory handling. An attacker on the local network may be able to cause a denial-of-service. This issue is fixed in the latest versions of iOS, iPadOS, macOS, and tvOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-43653 |
Exploitation
To exploit this vulnerability, an attacker must be on the same local network as the target device. By sending specially crafted network packets, the attacker can trigger the denial-of-service condition, potentially disrupting the normal operation of the affected devices.
Affected Products
- iOS 18.7.9 and later: Addresses memory handling issues that could lead to denial-of-service.
- iPadOS 18.7.9 and later: Similar fixes as iOS for iPad devices.
- macOS Sonoma 14.8.7 and later: Resolves the same memory handling vulnerabilities.
- macOS Tahoe 26.5 and later: Includes fixes for the identified issues.
- tvOS 26.5 and later: Addresses the vulnerability affecting Apple TV devices.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated to the latest versions of iOS, iPadOS, macOS, and tvOS. Regularly applying software updates will help protect against potential exploitation of this and other vulnerabilities.