CVE-2026-65349: Input Validation

Q: Which systems should be prioritized for updating?

Systems running iOS or iPadOS earlier than 26.6.1, or macOS Tahoe earlier than 26.6.2, are affected according to the available fix information. The provided data does not identify any unaffected configuration within those earlier releases.

Q: What impact could exploitation have?

The issue descriptions state that an app may be able to cause unexpected system termination or read kernel memory. The available information does not say whether exploitation requires an app to be installed, user interaction, or special device configuration.

Q: What should be done if a device is affected?

Install iOS 26.6.1, iPadOS 26.6.1, or macOS Tahoe 26.6.2, as applicable. No alternative mitigation or workaround is provided in the available data.

Published Aug 17, 2026

Updated

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.

Other sources

Audio. A logic issue was addressed with improved checks.

— Apple

ImageIO. An integer overflow was addressed with improved input validation.

— Apple

ImageIO. The issue was addressed with improved checks.

— Apple

IOGPUFamily. The issue was addressed with improved memory handling.

— Apple

Kernel. A use after free issue was addressed with improved memory management.

— Apple

Credit

Meta Red Team X - Nik Tsytsarkin, Geonha Lee@@leegn4a, f00l@@PPPF00L, 3ndy1@@_3ndy1, Minghao Lin@@Y1nkoc, 云散花折, Arjanit Isufi, Drinor Selmanaj (Sentry), Surya Narayan Kushwaha, an anonymous researcher, Bhaswanth Chigurupati(STAR Labs SG Pte), Billy Jheng Bing Jhong(STAR Labs SG Pte), Pan Zhenpeng@@Peterpan0927(STAR Labs SG Pte), Bedran Karakoc(Ruhr University Bochum), Tobias Funke(Ruhr University Bochum), Jacopo Clark(Ruhr University Bochum), Katharina Kohls(Ruhr University Bochum), Janggoon Lee(Out of Bounds), OpenAI Codex Security - Amy Burnett, wwwlk, Henock Habte, Seonwook Kim, Shubham Chaskar, lattice, Josef Korbel, Thomas Guillem, Niels Hofmans, Claudio Bozzato(Cisco Talos), Francesco Benvenuto(Cisco Talos), Josef Korbel (Citadelo), Hossein Lotfi@@hosselot(TrendAI Zero Day Initiative), Dung Do@@_piers2(Calif), 杉山壮太, Mohit Negi, Shubham Chaskar(Braze Security Team), Tommy DeVoss@@thedawgyg(Braze Security Team)

Affected Software

6 affected componentsFixes available

Apple iOS<26.6.1

26.6.1

Apple iPadOS<26.6.1

26.6.1

Apple macOS Tahoe<26.6.2

26.6.2

Apple iPadOS<26.6.1

Apple iPhone OS<26.6.1

Apple macOS>=26.0<26.6.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.6.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.6.2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in iOS 26.6.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in iPadOS 26.6.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Tahoe 26.6.2

Event History

Aug 17, 2026

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

Affected Software

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·09:29 PM

Data Sourced

via MITRE·09:29 PM

DescriptionWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

Which systems should be prioritized for updating?

Systems running iOS or iPadOS earlier than 26.6.1, or macOS Tahoe earlier than 26.6.2, are affected according to the available fix information. The provided data does not identify any unaffected configuration within those earlier releases.

What impact could exploitation have?

The issue descriptions state that an app may be able to cause unexpected system termination or read kernel memory. The available information does not say whether exploitation requires an app to be installed, user interaction, or special device configuration.

What should be done if a device is affected?

Install iOS 26.6.1, iPadOS 26.6.1, or macOS Tahoe 26.6.2, as applicable. No alternative mitigation or workaround is provided in the available data.

CVE-2026-65349: Input Validation

Other sources

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

Which systems should be prioritized for updating?

What impact could exploitation have?

What should be done if a device is affected?

Company

Resources

Contact