Medium · 4.3 CVE-2026-86918 EUVD-2026-104718GHSA-2c97-cvw9-q2hq

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27…

Published Oct 20, 2026 · Updated Oct 26, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: tvOS Product: visionOS Product: watchOS Platform: iOS Platform: macOS

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	< 27	27
Apple	macOS	< 27	27
Apple	tvOS	< 27	27
Apple	visionOS	< 27	27
Apple	watchOS	< 27	27

Advisories 1

WID-SEC-2026-3352 Apple iOS, iPadOS, macOS Tahoe, macOS Golden Gate, macOS Sequoia und Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 26, 2026

References

https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035
https://support.apple.com/en-us/149036
https://support.apple.com/en-us/149037
https://support.apple.com/en-us/149038