{"id":"CVE-2026-65385","kind":"vulnerability","aliases":["CVE-2026-65385"],"related":[],"title":"Apple iOS and iPadOS: out-of-bounds write can crash apps","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overflow may result in memory corruption and unexpected app termination.","summary":"Apple reports an out-of-bounds write in iOS, iPadOS, visionOS and watchOS that can corrupt memory and terminate an app unexpectedly. The sources describe the impact as memory corruption and app termination, with no mention of code execution.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","ios","ipados","vendor","visionos","watchos"],"not_affected_if":[],"how_to_check":"- Check the device OS version under Settings > General > About (unknown if the sources give a specific command or file).","fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`.\n- Update visionOS and watchOS to `27.2`.","status":"open","published_at":"2026-10-26T21:18:45+00:00","first_seen_at":"2026-10-26T21:20:32+00:00","triaged_at":"2026-10-26T21:21:22+00:00","updated_at":"2026-10-26T21:21:22+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-10-26T21:21:22Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`.\n- Update visionOS and watchOS to `27.2`.","reach":"unknown","title":"Apple iOS and iPadOS: out-of-bounds write can crash apps","impact":"low","summary":"Apple reports an out-of-bounds write in iOS, iPadOS, visionOS and watchOS that can corrupt memory and terminate an app unexpectedly. The sources describe the impact as memory corruption and app termination, with no mention of code execution.","category":"vendor","nicknames":[],"who_cares":["ios","ipados","visionos","watchos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Memory corruption and unexpected app termination on affected devices","analyst_note":"Check Apple's security release notes for CVE-2026-65385 to learn the trigger, whether code execution is possible, and whether it is exploited.","how_to_check":"- Check the device OS version under Settings > General > About (unknown if the sources give a specific command or file).","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Apple devices running the affected iOS, iPadOS, visionOS and watchOS builds before the fixed versions. The sources do not describe a specific configuration or app that makes a device more exposed, so the sources do not say who can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000589,"input_tokens":3311,"output_tokens":515,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-65385':15A,18A '26.7.2':86C,89C '27.2':91C,94C,96C,98C 'address':75C 'app':12A,48B,59B,109C 'appl':1A,20B,27B 'apple-devic':19B 'bound':8A,33B,71C,78C 'buffer':100C 'check':79C 'code':65B 'corrupt':43B,57B,106C 'crash':11A 'cve':13A,16A 'describ':52B 'devic':21B 'execut':66B 'fix':83C 'impact':54B 'improv':77C 'io':2A,22B,36B,85C,90C 'ipado':4A,23B,37B,88C,93C 'issu':73C,81C 'may':102C 'memori':44B,56B,105C 'mention':63B 'out-of-bound':5A,30B,68C 'overflow':101C 'report':28B 'result':103C 'sourc':51B 'termin':46B,60B,110C 'unexpect':49B,108C 'vendor':24B 'visiono':25B,38B,95C 'watcho':26B,40B,97C 'write':9A,34B,72C","nicknames":[],"mitigations":[],"who_affected":"Apple devices running the affected iOS, iPadOS, visionOS and watchOS builds before the fixed versions. The sources do not describe a specific configuration or app that makes a device more exposed, so the sources do not say who can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:45+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-65385","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65385","severity":null,"published_at":"2026-10-26T21:18:45+00:00","modified_at":"2026-10-26T21:18:45+00:00","first_seen_at":"2026-10-26T21:20:32+00:00","fetched_at":"2026-10-26T21:20:32+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}