{"id":"CVE-2026-65339","kind":"vulnerability","aliases":["CVE-2026-65339"],"related":[],"title":"A logic issue was addressed with improved checks","description":"About the security content of iOS 18.7.11 and iPadOS 18.7.11 - Apple Support\n\n# About the security content of iOS 18.7.11 and iPadOS 18.7.11\n\nThis document describes the security content of iOS 18.7.11 and iPadOS 18.7.11.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 18.7.11 and iPadOS 18.7.11\n\nReleased October 26, 2026\n\n### Audio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationAir 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to leak sensitive user information\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin\n\n### CoreGraphics\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationAir 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### CoreMedia\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationAir 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A malicious app may be able to access the camera without user permission\n\nDescription: An access issue was addressed with improved access restrictions.\n\nInformation about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.\n\n Published Date: October 26, 2026","summary":"Apple's iOS 18.7.11 and iPadOS 18.7.11 update fixes an out-of-bounds write in CoreGraphics that a maliciously crafted file can trigger to run code. Apple says it may have been exploited in a very targeted attack on earlier iOS versions. The same release also fixes a leak of sensitive data to apps and a camera access issue for malicious apps.","severity":"high","cvss":5.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"apple ipados","fixed":["26.6.1"],"affected":"< 26.6.1","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["26.6.1"],"affected":"< 26.6.1","ecosystem":"vendor"},{"name":"apple macos","fixed":["26.6.2"],"affected":">= 26.0, < 26.6.2","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","ios","ipados","vendor","vendor-advisory"],"not_affected_if":["already-updated"],"how_to_check":"- Check the iOS or iPadOS version under Settings > General > About; the advisory covers iOS 18.7.11 and iPadOS 18.7.11 and later.","fix":"- iOS 18.7.11 and iPadOS 18.7.11 per Apple's advisory (the sources do not list a separate version range).","status":"open","published_at":"2026-08-17T22:17:24+00:00","first_seen_at":"2026-10-29T04:33:04+00:00","triaged_at":"2026-10-29T04:34:39+00:00","updated_at":"2026-10-29T04:41:59+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-29T04:34:39Z","model":"claude-haiku-5-5","output":{"fix":"- iOS 18.7.11 and iPadOS 18.7.11 per Apple's advisory (the sources do not list a separate version range).","reach":"internet","title":"Apple iOS 18.7.11: CoreGraphics file flaw may allow code execution","impact":"high","summary":"Apple's iOS 18.7.11 and iPadOS 18.7.11 update fixes an out-of-bounds write in CoreGraphics that a maliciously crafted file can trigger to run code. Apple says it may have been exploited in a very targeted attack on earlier iOS versions. The same release also fixes a leak of sensitive data to apps and a camera access issue for malicious apps.","audience":"everyone","category":"vendor","nicknames":[],"who_cares":["ios","ipados","apple"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs arbitrary code on the device via a crafted file.","analyst_note":"Confirm the affected version range and the exploited-version note at https://support.apple.com/en-us/149225.","how_to_check":"- Check the iOS or iPadOS version under Settings > General > About; the advisory covers iOS 18.7.11 and iPadOS 18.7.11 and later.\n- Unknown whether the sources list an earlier affected version range beyond the note that exploitation was on versions before iOS 27.","plain_action":"Update your iPhone or iPad to iOS 18.7.11 or iPadOS 18.7.11 through Settings > General > Software Update.","needs_analyst":true,"not_affected_if":["already-updated"],"who_is_affected":"Apple devices in the listed range, including iPhone XS, iPhone XR, iPad 7th generation, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. The CoreGraphics flaw needs a crafted file to be opened or processed, so the risk is highest on devices that handle untrusted files. Devices already on the fixed release are not affected.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000856,"input_tokens":4908,"output_tokens":731,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':10A,13A,245C '-65339':11A,14A,246C '18.7.11':32B,35B,98C,101C,110C,113C,122C,125C,187C,190C '2026':194C,457C '26':193C,456C '27':326C '4th':208C,270C,354C '6th':220C,282C,366C '7th':206C,268C,352C '9th':213C,275C,359C 'abl':229C,376C 'access':87B,378C,386C,392C 'accuraci':444C 'addit':451C 'address':5A,240C,336C,389C 'advisori':28B 'also':75B 'app':83B,91B,226C,373C 'appl':22B,29B,56B,102C,127C,134C,160C,164C,182C,298C,400C,409C,416C,435C 'apple':15A,17A,20A 'arbitrari':295C 'assum':417C 'attack':67B,315C 'audio':195C 'avail':153C,196C,258C,342C 'awar':300C 'bound':42B,332C,339C 'calap':248C 'camera':86B,380C 'check':8A,243C,340C 'code':55B,296C 'confirm':140C 'contact':447C 'content':95C,107C,119C 'control':405C 'coregraph':45B,257C 'coremedia':341C 'craft':49B,290C 'custom':132C 'cve':9A,12A,171C,244C 'cve-id':170C 'data':81B 'date':454C 'dbg.re':250C 'describ':116C 'descript':235C,327C,384C 'disclos':137C 'discuss':138C 'document':115C,166C 'doesn':135C 'earlier':69B 'endors':415C 'execut':297C 'exploit':62B,310C 'extrem':313C 'file':50B,291C 'fix':37B,76B 'generat':209C,214C,221C,271C,276C,283C,355C,360C,367C 'generationair':207C,269C,353C 'id':172C 'impact':224C,286C,370C 'improv':7A,242C,338C,391C 'independ':402C 'individu':319C 'inform':177C,234C,394C,452C 'investig':145C 'io':23B,31B,70B,97C,109C,121C,186C,323C,325C 'ipad':205C,212C,218C,267C,274C,280C,351C,358C,364C 'ipado':24B,34B,100C,112C,124C,189C 'ipados':16A 'iphon':198C,200C,203C,260C,262C,265C,344C,346C,349C 'iphone':18A 'issu':3A,88B,142C,238C,306C,334C,387C 'later':211C,216C,223C,273C,278C,285C,357C,362C,369C 'lead':293C 'leak':78B,231C 'list':157C 'logic':2A,237C 'macos':21A 'make':436C 'malici':48B,90B,289C,372C 'manufactur':398C 'max':202C,264C,348C 'may':59B,227C,292C,307C,374C 'meta':251C 'mini':219C,281C,365C 'mustafa':247C 'nik':255C 'occur':147C 'octob':192C,455C 'ordinal0':249C 'os':19A 'out-of-bound':39B,329C 'page':163C,185C 'parti':431C,442C 'patch':149C 'perform':425C 'permiss':383C 'possibl':174C 'process':287C 'product':183C,396C,434C 'protect':133C 'provid':411C 'publish':453C 'recent':154C 'recommend':413C 'red':252C 'refer':167C 'regard':421C,439C 'releas':74B,151C,155C,162C,191C 'reliabl':446C 'report':303C 'represent':438C 'respons':419C 'restrict':393C 'run':54B 'say':57B 'secur':94C,106C,118C,128C,141C,161C,165C,179C,184C 'see':180C 'select':424C 'sensit':80B,232C 'sophist':314C 'specif':317C 'support':103C 'target':66B,318C 'team':253C 'test':407C 'third':430C,441C 'third-parti':429C,440C 'trigger':52B 'tsytsarkin':256C 'updat':36B,129C 'use':427C 'user':233C,382C 'vendor':25B,27B,449C 'vendor-advisori':26B 'version':71B,321C 'vulner':168C 'websit':403C,432C,443C 'without':381C,412C 'write':43B,333C 'x':254C 'xr':204C,266C,350C 'xs':199C,201C,261C,263C,345C,347C","nicknames":[],"mitigations":[],"who_affected":"Apple devices in the listed range, including iPhone XS, iPhone XR, iPad 7th generation, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. The CoreGraphics flaw needs a crafted file to be opened or processed, so the risk is highest on devices that handle untrusted files. Devices already on the fixed release are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update your iPhone or iPad to iOS 18.7.11 or iPadOS 18.7.11 through Settings > General > Software Update.","first_public_at":"2026-08-17T22:17:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"lab","external_id":"https://support.apple.com/en-us/149225#CVE-2026-65339","url":"https://support.apple.com/en-us/149225","severity":null,"published_at":"2026-10-26T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-29T04:33:04+00:00","fetched_at":"2026-10-29T04:33:04+00:00","note":"Apple: About the security content of iOS 18.7.11 and iPadOS 18.7.11 - Apple Support"},{"source":"nvd","external_id":"CVE-2026-65339","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65339","severity":null,"published_at":"2026-08-17T22:17:24+00:00","modified_at":"2026-10-26T21:18:38+00:00","first_seen_at":"2026-10-29T04:41:59+00:00","fetched_at":"2026-10-29T04:41:59+00:00","note":null}],"documents":[{"id":14114,"url":"https://support.apple.com/en-us/149225","title":"Apple: About the security content of iOS 18.7.11 and iPadOS 18.7.11 - Apple Support","kind":"advisory","source":"lab","publisher":"vendor","text":"About the security content of iOS 18.7.11 and iPadOS 18.7.11 - Apple Support\n\n# About the security content of iOS 18.7.11 and iPadOS 18.7.11\n\nThis document describes the security content of iOS 18.7.11 and iPadOS 18.7.11.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 18.7.11 and iPadOS 18.7.11\n\nReleased October 26, 2026\n\n### Audio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationAir 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to leak sensitive user information\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin\n\n### CoreGraphics\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationAir 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### CoreMedia\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationAir 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A malicious app may be able to access the camera without user permission\n\nDescription: An access issue was addressed with improved access restrictions.\n\nInformation about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.\n\n Published Date: October 26, 2026","published_at":"2026-10-26T00:00:00+00:00","relation":"advisory","confidence":null,"note":null},{"id":14249,"url":"https://support.apple.com/en-us/148281","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":14250,"url":"https://support.apple.com/en-us/148282","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}