CVE-2026-65330: Input Validation

Q: What level of access does an attacker need?

The reported exploitation path involves an app causing unexpected system termination or corrupting kernel memory. The data does not state that user interaction, network access, or special device configuration is required.

Q: Which updates contain the fixes?

Apple lists fixes in iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Devices running those listed fixed releases have the addressed issues remediated.

Published Aug 17, 2026

Updated

Audio. A logic issue was addressed with improved checks.

Other sources

ImageIO. An integer overflow was addressed with improved input validation.

— Apple

ImageIO. The issue was addressed with improved checks.

— Apple

IOGPUFamily. The issue was addressed with improved memory handling.

— Apple

Kernel. A use after free issue was addressed with improved memory management.

— Apple

Kernel. An out-of-bounds read was addressed with improved input validation.

— Apple

Credit

Meta Red Team X - Nik Tsytsarkin, Geonha Lee@@leegn4a, f00l@@PPPF00L, 3ndy1@@_3ndy1, Minghao Lin@@Y1nkoc, 云散花折, Arjanit Isufi, Drinor Selmanaj (Sentry), Surya Narayan Kushwaha, an anonymous researcher, Bhaswanth Chigurupati(STAR Labs SG Pte), Billy Jheng Bing Jhong(STAR Labs SG Pte), Pan Zhenpeng@@Peterpan0927(STAR Labs SG Pte), Bedran Karakoc(Ruhr University Bochum), Tobias Funke(Ruhr University Bochum), Jacopo Clark(Ruhr University Bochum), Katharina Kohls(Ruhr University Bochum), Janggoon Lee(Out of Bounds), OpenAI Codex Security - Amy Burnett, wwwlk, Henock Habte, Seonwook Kim, Shubham Chaskar, lattice, Josef Korbel, Thomas Guillem, Niels Hofmans, Claudio Bozzato(Cisco Talos), Francesco Benvenuto(Cisco Talos), Josef Korbel (Citadelo), Hossein Lotfi@@hosselot(TrendAI Zero Day Initiative), Dung Do@@_piers2(Calif), 杉山壮太, Mohit Negi, Shubham Chaskar(Braze Security Team), Tommy DeVoss@@thedawgyg(Braze Security Team)

Affected Software

6 affected componentsFixes available

Apple iOS<26.6.1

26.6.1

Apple iPadOS<26.6.1

26.6.1

Apple macOS Tahoe<26.6.2

26.6.2

Apple iPadOS<26.6.1

Apple iPhone OS<26.6.1

Apple macOS>=26.0<26.6.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.6.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.6.2
Upgrade
Upgrade iOS to a version that resolves this vulnerability.
Fixed in 26.6.1
Upgrade
Upgrade iPadOS to a version that resolves this vulnerability.
Fixed in 26.6.1
Upgrade
Upgrade macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.6.2

Event History

Aug 17, 2026

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

Affected Software

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·09:31 PM

Data Sourced

via MITRE·09:31 PM

DescriptionWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What level of access does an attacker need?

The reported exploitation path involves an app causing unexpected system termination or corrupting kernel memory. The data does not state that user interaction, network access, or special device configuration is required.

Which updates contain the fixes?

Apple lists fixes in iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Devices running those listed fixed releases have the addressed issues remediated.

CVE-2026-65330: Input Validation

Other sources

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What level of access does an attacker need?

Which updates contain the fixes?

Company

Resources

Contact