Live › vulnerability › CVE-2026-64750
Go to dashboardAn out-of-bounds write in Apple's image processing lets a maliciously crafted image corrupt memory on iOS, iPadOS and macOS devices. The sources do not say what code execution or data access an attacker can achieve from the corruption.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Apple device users on the listed OS versions are exposed when they process an image, since the flaw is triggered by a crafted image. Devices already on the fixed versions listed above are not affected. The sources do not say which image formats or apps trigger the bug.
No product ranges from the sources yet.
26.7.2 or later26.7.2, macOS Sequoia to 15.8.2, and macOS Golden Gate to 27 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may result in memory corruption.
This page as .md · .json · in your agent: get_signal("CVE-2026-64750")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.