CVE-2026-28858: Input Validation

Q: What is the severity of CVE-2026-28858?

CVE-2026-28858 is considered a critical vulnerability due to its capability to cause unexpected system termination and potential kernel memory corruption.

Q: How do I fix CVE-2026-28858?

To address CVE-2026-28858, update your iOS or iPadOS to version 26.4 or later.

Q: Which devices are affected by CVE-2026-28858?

CVE-2026-28858 affects Apple devices running iOS and iPadOS versions prior to 26.4.

Q: What type of vulnerability is CVE-2026-28858?

CVE-2026-28858 is an authentication vulnerability with issues related to buffer overflow and state management.

Q: Can CVE-2026-28858 be exploited remotely?

Yes, CVE-2026-28858 can potentially be exploited remotely, allowing an attacker to disrupt system operations.

Published Mar 24, 2026

Updated

802.1X. An authentication issue was addressed with improved state management.

Other sources

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

— NVD

Accounts. An authorization issue was addressed with improved state management.

— Apple

App Protection. The issue was addressed with improved checks.

— Apple

Audio. A type confusion issue was addressed with improved memory handling.

— Apple

Audio. A use-after-free issue was addressed with improved memory management.

— Apple

Credit

Etienne Charron (Renault), Victoria Martini (Renault), Zhongcheng Li(IES Red Team), CVE-2025-14524, Andreas Jaegersberger & Ro Achterberg(Nosebeard Labs), XiguaSec, CVE-2025-64505, Gor Aleksanyan(BoB 0xB6), Dhiyanesh Selvaraj@@redroot97(BoB 0xB6), 이동하 (Lee Dong Ha(BoB 0xB6), Jian Lee@@speedyfriend433, DARKNAVY@@DarkNavyOrg, Johnny Franks@@0xjohnny, Ilya Andr (andrd3v)(RTU MIREA), Ilias Morad (A2nkF)(Voynich Group), Duy Trần@@khanhduytran0, @@hugeBlack, Himanshu Bharti@@Xpl0itme(Khatima), Dave G., wdszzml, Atuin Automated Vulnerability Discovery Engine, Guy Dor, Gongyu Ma@@Mezone0, Alex Radocea, an anonymous researcher, Hazem Issa, Yongdae Kim @ SysSec, KAIST, Caspian Tarafdar, Andrew Becker, webb, Thomas Espach, @@hamayanhamayan, Yeonghyeon Choi, Daniel Rhea, Söhnke Benedikt Fischedick (Tripton), Emrovsky & Switch3301, Yevhen Pervushyn, Minse Kim, Narcis Oliveras Fontàs, Nathaniel Oh@@calysteon, Hongze Wu(Ant Group Infrastructure Security Team), Shuaike Dong(Ant Group Infrastructure Security Team), greenbynox, Arni Hardarson, Justin Cohen(Google), Jex Amro, Tuan D. Hoang, Yongdae Kim @ KAIST SysSec Lab, Alvin Aries Tapia, Cristian Dinca (icmd.tech), Hossein Lotfi@@hosselot(TrendAI Zero Day Initiative), Héloïse Gollier, Mathy Vanhoef (KU Leuven), Rosyna Keller(Totally Not Malicious Software), Adrián Pérez Martínez, Uluk Abylbekov, Zack Tickman

Affected Software

4 affected componentsFixes available

Apple iOS<26.4

26.4

Apple iPadOS<26.4

26.4

Apple iPadOS<26.4

Apple iPhone OS<26.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.4

Event History

Mar 24, 2026

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

Description

Mar 25, 2026

CVE Published

via MITRE·12:32 AM

Data Sourced

via MITRE·12:32 AM

DescriptionWeakness

Data Sourced

via NVD·01:17 AM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

APPLE-126792

Frequently Asked Questions

What is the severity of CVE-2026-28858?

CVE-2026-28858 is considered a critical vulnerability due to its capability to cause unexpected system termination and potential kernel memory corruption.

How do I fix CVE-2026-28858?

To address CVE-2026-28858, update your iOS or iPadOS to version 26.4 or later.

Which devices are affected by CVE-2026-28858?

CVE-2026-28858 affects Apple devices running iOS and iPadOS versions prior to 26.4.

What type of vulnerability is CVE-2026-28858?

CVE-2026-28858 is an authentication vulnerability with issues related to buffer overflow and state management.

Can CVE-2026-28858 be exploited remotely?

Yes, CVE-2026-28858 can potentially be exploited remotely, allowing an attacker to disrupt system operations.

CVE-2026-28858: Input Validation

Other sources

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-28858?

How do I fix CVE-2026-28858?

Which devices are affected by CVE-2026-28858?

What type of vulnerability is CVE-2026-28858?

Can CVE-2026-28858 be exploited remotely?

Company

Resources

Contact