CVE-2026-86975: Apple iOS vulnerability
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
iPadOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
macOS Golden Gateto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
tvOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
visionOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
watchOSto a version that resolves this vulnerability.Fixed in 27
Event History
Frequently Asked Questions
What systems are affected?
The issue is addressed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27. The provided information does not identify affected earlier versions.
What does exploitation require?
An attacker would need to cause the target to process a maliciously crafted image. The stated impact is unexpected process termination.
What is the known security impact?
The provided information describes an out-of-bounds read that can terminate the affected process unexpectedly. It does not state that code execution, data disclosure, or privilege escalation is possible.