Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS and iPadOS | < 26.7.2; < 27.2 |
| Apple | macOS | < 15.8.2; < 26.7.2; < 27.2 |
| Apple | tvOS | < 27.2 |
| Apple | visionOS | < 27.2 |
| Apple | watchOS | < 27.2 |
References
- https://support.apple.com/en-us/149227Vendor Advisory, Release Notes
- https://support.apple.com/en-us/149230Vendor Advisory, Release Notes
- https://support.apple.com/en-us/149521Vendor Advisory, Release Notes
- https://support.apple.com/en-us/149522Vendor Advisory, Release Notes
- https://support.apple.com/en-us/149523Vendor Advisory, Release Notes
- https://support.apple.com/en-us/149524Vendor Advisory, Release Notes
- https://support.apple.com/en-us/149525Vendor Advisory, Release Notes
- https://support.apple.com/en-us/149526Vendor Advisory, Release Notes
Timeline
- Published
- Oct 26, 2026
- Last modified
- Nov 5, 2026
- NVD status
- Analyzed