CVE-2026-64705: Buffer Overflow

Q: Which systems should be prioritized for updating?

Systems running macOS Sequoia earlier than 15.7.7 or macOS Sonoma earlier than 14.8.7 should be prioritized. The fixes cover multiple components, including Accessibility, APFS, AppleJPEG, Audio, CoreMedia, CoreServices, CUPS, FileProvider, GPU Drivers, HFS, and Crash Reporter.

Q: What could successful exploitation allow?

The available information states that an app may be able to cause unexpected system termination or write kernel memory. Other addressed issues include memory corruption, race conditions, path parsing, sensitive-data exposure in crash reporting, and insufficient log redaction.

Q: What attacker access is indicated by the available information?

The description specifically identifies an app as the potential source of exploitation for the unexpected termination or kernel-memory-write issue. It does not state whether remote access, user interaction, elevated privileges, or a particular default configuration is required.

Published May 11, 2026

Updated

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory.

Other sources

Accessibility. This issue was addressed through improved state management.

— Apple

APFS. A buffer overflow was addressed with improved bounds checking.

— Apple

AppleJPEG. A memory corruption issue was addressed with improved input validation.

— Apple

Audio. The issue was addressed with improved memory handling.

— Apple

CoreMedia. This issue was addressed through improved state management.

— Apple

Credit

Dave G., impost0r (ret2plt), Nicholas Soh, David Ige(Beryllium Security), Arni Hardarson, Andreas Jaegersberger & Ro Achterberg(Nosebeard Labs), Alex Radocea, Kun Peeks@@SwayZGl1tZyyy, Surya Kushwaha, Peter Malone, Aswin Kumar Gokula Kannan, Csaba Fitzl@@theevilbit(Iru), Suresh Sundaram, Jiri Ha, wdszzml, Atuin Automated Vulnerability Discovery Engine, Johnny Franks@@0xjohnny, Google Threat Analysis Group, Mihalis Haatainen, Ari Hawking, Ashish Kunwar, Vaagn Vardanian, Nathaniel Oh@@calysteon, Yiğit Can YILMAZ@@yilmazcanyigit, Robert Tran(STAR Labs SG Pte), popku1337(STAR Labs SG Pte), Billy Jheng Bing Jhong(STAR Labs SG Pte), Pan Zhenpeng@@Peterpan0927(STAR Labs SG Pte), Aswin kumar Gokulakannan, Calif.io in collaboration with Claude, Anthropic Research, beist, Ryan Hileman via Xint Code (xint.io), Tristan Madani@@TristanInSec(Talence Security), Chris Betz, Dhiyanesh Selvaraj@@redroot97, Atul R V, Anton Pakhunov, Ricardo Prado, Ian van der Wurff (ian.nl), Ilya Sc. Jowell A., Morris Richman@@morrisinlife, Andrei Dodu, Matej Moravec@@MacejkoMoravec, Doron Assness, Amy (amys.website), YingQi Shi@@Mas0nShi(DBAppSecurity's WeBin lab), an anonymous researcher, Wang Yu, Brendon Tiszka(Google Project Zero), Zhongcheng Li(IES Red Team), Michael DePlante@@izobashi(TrendAI Zero Day Initiative), Surya Kushwaha(Supernetworks), Robert Tran(Supernetworks), Peter Malone(Supernetworks), Dave G.(Supernetworks), Alex Radocea(Supernetworks), Andy Koo@@andykoo(Hexens), Jorge Welch@@jorgwelch

Affected Software

6 affected componentsFixes available

Apple macOS Sequoia=15.7.7

Apple macOS Sonoma=14.8.7

Apple macOS Sonoma<14.8.7

14.8.7

Apple macOS Sequoia<15.7.7

15.7.7

Apple macOS>=14.0<14.8.7

Apple macOS>=15.0<15.7.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.8.7
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.7.7

Event History

May 11, 2026

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

Affected Software

Aug 25, 2026

CVE Published

via MITRE·07:24 PM

Data Sourced

via MITRE·07:24 PM

DescriptionWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

Which systems should be prioritized for updating?

Systems running macOS Sequoia earlier than 15.7.7 or macOS Sonoma earlier than 14.8.7 should be prioritized. The fixes cover multiple components, including Accessibility, APFS, AppleJPEG, Audio, CoreMedia, CoreServices, CUPS, FileProvider, GPU Drivers, HFS, and Crash Reporter.

What could successful exploitation allow?

The available information states that an app may be able to cause unexpected system termination or write kernel memory. Other addressed issues include memory corruption, race conditions, path parsing, sensitive-data exposure in crash reporting, and insufficient log redaction.

What attacker access is indicated by the available information?

The description specifically identifies an app as the potential source of exploitation for the unexpected termination or kernel-memory-write issue. It does not state whether remote access, user interaction, elevated privileges, or a particular default configuration is required.

CVE-2026-64705: Buffer Overflow

Other sources

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

Which systems should be prioritized for updating?

What could successful exploitation allow?

What attacker access is indicated by the available information?

Company

Resources

Contact