Product:
iOS, iPadOS, macOS
Summary
An out-of-bounds write issue was addressed with improved input validation. This issue may lead to unexpected app termination when parsing a maliciously crafted file. The issue is fixed in several versions of iOS, iPadOS, and macOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2026-43656 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious file that, when processed by the affected software, triggers the out-of-bounds write condition. This could lead to unexpected behavior, including app crashes or potential unauthorized access to system resources.
Affected Products
- iOS 18.7.9 – Fixed version addressing the out-of-bounds write issue.
- iPadOS 18.7.9 – Fixed version addressing the out-of-bounds write issue.
- iOS 26.5 – Fixed version addressing the out-of-bounds write issue.
- iPadOS 26.5 – Fixed version addressing the out-of-bounds write issue.
- macOS Sequoia 15.7.7 – Fixed version addressing the out-of-bounds write issue.
- macOS Sonoma 14.8.7 – Fixed version addressing the out-of-bounds write issue.
- macOS Tahoe 26.5 – Fixed version addressing the out-of-bounds write issue.
Mitigation
Users are advised to update their devices to the latest versions of iOS, iPadOS, or macOS to mitigate the risk associated with this vulnerability. Regularly applying software updates can help protect against known vulnerabilities.