CVE-2026-86875: Input Validation
Published Sep 14, 2026
·Updated
An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.
Other sources
App Store. This issue was addressed by enforcing library validation on the affected binaries.
— Apple
CoreSymbolication. An input validation issue was addressed with improved input validation.
— Apple
Credit
Ilya Andr (andrd3v)(Positive Technologies), Egor Saltykov, Eddy T, Mickey Jin@@patch1t
Affected Software
3 affected componentsFixes available
Apple Xcode<27
Apple Xcode<27
27
Apple Xcode<27.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 27 - Upgrade
Upgrade
Xcodeto a version that resolves this vulnerability.Fixed in 27
Event History
Sep 14, 2026
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Oct 20, 2026
CVE Published
via MITRE·12:50 AM
Data Sourced
via MITRE·12:50 AM
DescriptionWeakness
Data Sourced
via NVD·01:17 AM
DescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
How can I determine whether the issue has been remediated?
The issue is fixed in Xcode 27. Verify the installed Xcode version; installations running Xcode 27 have the documented fix.