Product:
iOS, iPadOS, macOS Tahoe, tvOS, watchOS
Summary
An out-of-bounds read was addressed with improved bounds checking. This issue may allow an app to cause unexpected system termination or read kernel memory. The issue is fixed in the latest versions of iOS, iPadOS, macOS Tahoe, tvOS, and watchOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2026-43655 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious application that triggers the out-of-bounds read condition. By sending specially crafted data over the network, the attacker may be able to read sensitive kernel memory or cause the system to terminate unexpectedly, leading to potential data exposure or denial of service.
Affected Products
- iOS: Affected by the out-of-bounds read issue, leading to potential system termination.
- iPadOS: Similar vulnerabilities as iOS, with the same potential impacts.
- macOS Tahoe: Vulnerable to the same out-of-bounds read issue.
- tvOS: Affected by the vulnerability, risking system stability.
- watchOS: Also vulnerable, with similar risks as other platforms.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS Tahoe, tvOS, and watchOS. Regularly applying updates ensures that security patches are in place to protect against known vulnerabilities.