--- id: "CVE-2026-43807" page: "https://infrastack.ai/live/CVE-2026-43807" kind: "vulnerability" aliases: ["CVE-2026-43807"] title: "A buffer overflow was addressed with improved bounds checking" severity: "critical" cvss: 9.8 epss: null exploited: false status: "open" category: "vendor" products: [{"name": "apple ipados", "fixed": ["26.5.2"], "affected": "< 26.5.2", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["26.5.2"], "affected": "< 26.5.2", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["14.8.8"], "affected": ">= 14.0, < 14.8.8", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["15.7.8"], "affected": ">= 15.0, < 15.7.8", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["26.5.2"], "affected": ">= 26.0, < 26.5.2", "ecosystem": "vendor"}, {"name": "apple tvos", "fixed": ["26.6"], "affected": "< 26.6", "ecosystem": "vendor"}, {"name": "apple visionos", "fixed": ["26.6"], "affected": "< 26.6", "ecosystem": "vendor"}, {"name": "apple watchos", "fixed": ["26.6"], "affected": "< 26.6", "ecosystem": "vendor"}] ecosystems: ["vendor"] tags: ["apple", "ios", "ipad", "ipados", "iphone", "vendor", "vendor-advisory"] not_affected_if: ["already-on-18.7.10"] published_at: "2026-07-27T21:17:03+00:00" first_seen_at: "2026-11-12T20:57:57+00:00" updated_at: "2026-11-12T21:11:27+00:00" sources: [{"source": "lab", "url": "https://support.apple.com/en-us/148287", "first_seen_at": "2026-11-12T20:57:57+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43807", "first_seen_at": "2026-11-12T21:11:27+00:00"}] exploit_sources: [] --- # A buffer overflow was addressed with improved bounds checking Link for people: https://infrastack.ai/live/CVE-2026-43807 (this .md is for agents) The advisory for iOS 18.7.10 and iPadOS 18.7.10 lists many fixed flaws, but the text given does not describe CVE-2026-43807 itself. Nothing in the sources says what an attacker gets from this specific CVE. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - vendor:apple ipados affected < 26.5.2 fixed 26.5.2 - vendor:apple iphone os affected < 26.5.2 fixed 26.5.2 - vendor:apple macos affected >= 14.0, < 14.8.8 fixed 14.8.8 - vendor:apple macos affected >= 15.0, < 15.7.8 fixed 15.7.8 - vendor:apple macos affected >= 26.0, < 26.5.2 fixed 26.5.2 - vendor:apple tvos affected < 26.6 fixed 26.6 - vendor:apple visionos affected < 26.6 fixed 26.6 - vendor:apple watchos affected < 26.6 fixed 26.6 ## How to check - Check the installed version on an iPhone or iPad under Settings > General > About; compare against `18.7.10`. - Look up CVE-2026-43807 in the full Apple advisory at https://support.apple.com/en-us/148287 to read its entry. ## Fix - iOS and iPadOS `18.7.10` per the Apple advisory; the advisory text given does not state a fix specifically for CVE-2026-43807. ## Timeline - 2026-11-12T20:57:57+00:00 lab https://support.apple.com/en-us/148287 — Apple: About the security content of iOS 18.7.10 and iPadOS 18.7.10 - Apple Support - 2026-11-12T21:11:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-43807 ## Documents - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/128072 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/127594 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/127595 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/128068 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/128069 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/128070 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/128071 - [mentions] Apple: About the security content of iOS 18.7.10 and iPadOS 18.7.10 - Apple Support https://support.apple.com/en-us/148287 ## From the sources About the security content of iOS 18.7.10 and iPadOS 18.7.10 - Apple Support # About the security content of iOS 18.7.10 and iPadOS 18.7.10 This update delivers security fixes that were first made available in the iOS 26.6 and 27 and iPadOS 26.6 and 27 betas. This document describes the security content of iOS 18.7.10 and iPadOS 18.7.10. ## About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page. Apple security documents reference vulnerabilities by CVE-ID when possible. For more information about security, see the Apple Product Security page. ## iOS 18.7.10 and iPadOS 18.7.10 Released August 17, 2026 ### Accessibility Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring Description: This issue was addressed through improved state management. CVE-2026-64732: Jorge Welch (@jorgwelch) ### Accounts Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: A malicious application may be able to bypass Privacy preferences Description: An authorization issue was addressed with improved state management. CVE-2026-65404: 이재영, Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, Arni Hardarson (Neonix Security) Entry added September 14, 2026 ### AirDrop Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An attacker in a privileged network position may be able to cause a denial-of-service Description: A reachable assertion was addressed with improved input validation. CVE-2026-43667: Arash Ale Ebrahim from SCy-Phy research group of CISPA Helmholtz Center for Information Security ### APFS Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory Description: The issue was addressed with improved memory handling. CVE-2026-64695: Narendra Singh (@_3P1C), Peter Malone ### App Store Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved checks. CVE-2026-43801: Rahul Raj ### AppleDouble Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-43776: Peter Malone, Nicolas Rabrenovic, Irvin Wang, Rishabh Jain (rjcyber) of cyberplanet Entry updated September 14, 2026 ### Audio Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to cause a denial-of-service Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/) ### Authentication Services Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: A website may be able to determine a user's IP address with Private Relay turned on Description: An information disclosure issue was addressed with improved state management. CVE-2026-65355: Xint Code Entry added September 14, 2026 ### AVEVideoEncoder Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to execute arbitrary code with kernel privileges Description: A buffer overflow was addressed with improved size validation. CVE-2026-64747: Franco Belman at Blackwing Intelligence ### AVEVideoEncoder Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-64762: Franco Belman at Blackwing Intelligence, Dun ### BackgroundAssets Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to delete files for which it does not have permission Description: A permissions issue was addressed with improved validation. CVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab ### Books Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to modify protected parts of the file system Description: A race condition was addressed with improved checks. CVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova ### Contacts Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to add contacts without user authorization Description: An authorization issue was addressed with improved validation. CVE-2026-64746: Rodolphe Brunetti (@eisw0lf) of Lupus Nova, Daniel Febrero ### Contacts Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: Processing a maliciously crafted contact may leak sensitive data Description: The issue was addressed with improved checks. CVE-2026-64734: Daniel Williams ### Contacts Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to access information about a user's contacts CVE-2026-43797: Arni Hardarson (Neonix Security) ### CoreAudio Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: Processing a maliciously crafted audio file may corrupt process memory Description: The issue was addressed with improved memory handling. CVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative ### CoreAudio Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: Processing an audio stream in a maliciously crafted media file may terminate the process Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher ### CoreAudio Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: A remote attacker may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-43803: Rahul Raj ### CoreMedia Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: A memory corruption issue was addressed with improved memory handling. CVE-2026-43711: James Duffy (@0x4A616D657344) ### CoreUI Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: Processing a maliciously crafted asset catalog may result in disclosure of process memory Description: The issue was addressed with improved memory handling. CVE-2026-43738: Peter Malone ### CoreUI Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to cause a denial of service Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-84489: stratan (@5tratan), Peter Malone Entry added September 14, 2026 ### CoreVideo Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-43802: an anonymous researcher ### curl Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation Impact: Authentication credentials may be sent to a server on another origin Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. ### Foundation Available for: iPhone XS, iPhone XS Max --- _Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_