Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Xcode ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen und um Sicherheitsmechanismen zu umgehen.
Product
Xcode ist eine integrierte Entwicklungsumgebung von Apple, mit der man Programme für Mac OS X und iOS schreiben kann. Das Programm ist nur für Mac OS X verfügbar.
Vulnerabilities 5
-
High 8.1
Git allows arbitrary code execution through broken config quoting
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). W…
KEV Aug 25, 2025 -
High 8.2
This issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to break out of its …
-
High 7.5
The issue was addressed with improved checks. This issue is fixed in Xcode 26. Processing an overly large path value ma…
-
High 7.1
The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write fil…
-
Medium 4.0
A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly lar…
Revision history
-
#1
Initiale Fassung
References
-
APPLE-SA-09-15-2025-12 Xcode 26 vom 2025-09-15
https://lists.apple.com/archives/security-announce/2025/Sep/msg00011.html
-
Xcode 26 vom 2025-09-15
https://support.apple.com/en-us/125117