Where
-Infinity
0
First published (updated )
Advisory
APPLE-149724
Severity
5.4
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.

1 / 2
Source: MITRE
First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 3
Source: Apple
First published (updated )
Input Validation, Use After Free

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
Severity
8.8
Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

1 / 4
Source: MITRE
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.

1 / 7
Source: MITRE
First published (updated )
Input Validation, Use After Free

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

1 / 11
Source: MITRE
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 6
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
Severity
3.3
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free, Infoleak
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 125
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 124
Source: Apple
First published (updated )
Severity
6.2
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.

1 / 128
Source: MITRE
First published (updated )
Severity
6.1
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 129
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 123
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted message may lead to a denial-of-service.

1 / 137
Source: MITRE
First published (updated )
Severity
5.3
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free, Infoleak
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. The user's original email address may be leaked when using the Hide My Email feature.

1 / 118
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. A remote attacker may be able to cause a denial-of-service.

1 / 137
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 140
Source: Apple
First published (updated )
Severity
4.7
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.

1 / 140
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 148
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 148
Source: Apple
First published (updated )
Severity
7.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 146
Source: Apple
First published (updated )
Severity
7.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 149
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 149
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 155
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 156
Source: Apple
First published (updated )
Severity
3.3
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 156
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 143
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 166
Source: Apple
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203