Description
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Parsing a maliciously crafted file may lead to an unexpected app termination.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | iOS and iPadOS | < 26.5 | 26.5 |
| Apple | macOS | < 26.5 | 26.5 |
| Apple | tvOS | < 26.5 | 26.5 |
| Apple | visionOS | < 26.5 | 26.5 |
| Apple | watchOS | < 26.5 | 26.5 |
Advisories 4
- WID-SEC-2026-1459 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026
- WID-SEC-2026-1463 Apple macOS Sonoma, macOS Sequoia und macOS Tahoe: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 12, 2026
- NCSC-2026-0139 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · May 12, 2026
- NCSC-2026-0138 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · May 12, 2026