APPLE SAFARI · CVE-2026-65391 · Vendor
FIX → 26.6.1 · 26.6.2 · 27.0
This Apple advisory describes security fixes shipped in tvOS 27 for Apple TV 4K, covering many components such as ImageIO, CoreMedia, Bluetooth and APFS. The entries describe effects ranging from app crashes and privacy leaks to arbitrary code execution and kernel memory writes, and the text does not isolate which entry the signal CVE-2026-65391 refers to.
first public Sep 14, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Apple TV 4K (2nd generation and later) devices running tvOS 27 before the listed fixes. Most entries require a malicious app or a crafted file, image, font or Bluetooth packet, and some require physical radio proximity. The sources do not say which entry maps to this CVE, so the exact trigger is unknown.
Not affected if updated-to-fixed-release
About the security content of tvOS 27 - Apple Support
This document describes the security content of tvOS 27.
For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.
Apple security documents reference vulnerabilities by CVE-ID when possible.
For more information about security, see the Apple Product Security page.
Released September 14, 2026
Available for: Apple TV 4K 2nd generation and later
Impact: Processing a maliciously crafted image may lead to unexpected process termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-86882: Peter Malone
Available for: Apple TV 4K 2nd generation and later
Impact: Processing a maliciously crafted image may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-86918: Arni Hardarson (Neonix Security)
Entry added October 19, 2026
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved data protection.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Who cares apple, apple-tv, tvos, vendor-advisory
Upgrade to 26.6.1 · 26.6.2 · 27.0
CVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to cause unexpected system termination or write kernel memory
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84523: Cem Onat Karagun, an anonymous researcher
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to access sensitive user data
Description: A privacy issue was addressed with improved access restrictions.
CVE-2026-84582: Zhongcheng Li (CK01)
Entry added October 19, 2026
Available for: Apple TV 4K 2nd generation and later
Impact: A local app may be able to read a persistent account identifier
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-86888: Zhongcheng Li (CK01)
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory management.
CVE-2026-65407: Franco Belman at Blackwing Intelligence
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to leak sensitive user information
Description: A logic issue was addressed with improved checks.
CVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin
Available for: Apple TV 4K 2nd generation and later
Impact: A local app may be able to read a persistent account identifier
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-84583: Zhongcheng Li from IES Red Team
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to cause unexpected system termination
Description: The issue was addressed with improved checks.
CVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to cause unexpected system termination
Description: A type confusion issue was addressed with improved memory handling.
CVE-2026-84616: Peter Malone
Available for: Apple TV 4K 2nd generation and later
Impact: A sandboxed app may be able to execute arbitrary code with kernel privileges
Description: A race condition was addressed with improved state management.
CVE-2026-84607: Ruslan Dautov
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to access sensitive user data
Description: A logic issue was addressed with improved validation.
CVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security
Available for: Apple TV 4K 2nd generation and later
Impact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution
Description: An out-of-bounds write issue was addressed with improved bounds checking.
Available for: Apple TV 4K 2nd generation and later
Impact: An app may gain unauthorized access to Bluetooth
Description: An authorization issue was addressed with improved state management.
CVE-2026-84560: an anonymous researcher
Available for: Apple TV 4K 2nd generation and later
Impact: An attacker in radio range may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84613: jioundai
Entry added October 19, 2026
Available for: Apple TV 4K 2nd generation and later
Impact: A local app may be able to read a persistent account identifier
Description: An information disclosure issue was addressed with improved state management.
CVE-2026-86895: Stanislav Jelezoglo
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to read device name
Description: A permissions issue was addressed with additional restrictions.
CVE-2026-86893: Heiner Gerdes
Impact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien
Entry added October 26, 2026
Available for: Apple TV 4K 2nd generation and later
Impact: Processing a maliciously crafted video file may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-65344: Siyeong kim
Available for: Apple TV 4K 2nd generation and later
Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Description: A use after free issue was addressed with improved memory management.
CVE-2026-86913: Meta Product Security
Entry added October 19, 2026
Available for: Apple TV 4K 2nd generation and later
Impact: An app may be able to access motion data from headphones without user consent
Description: An authorization issue was addressed with improved validation.
CVE-2026-43737: Stuart Wallace
Available for: Apple TV 4K 2nd generation and later
Impact: Processing a maliciously crafted font may result in the disclosure of process memory
Description: An out-of-bounds read was addressed with improved bounds checking.
CVE-2026-84596: ret2happy, Meta Product Security
Available for: Apple TV 4K 2nd generation and later
Impact: Processing a maliciously crafted file may lead to unexpected app termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)
Available for: Apple TV 4K 2nd generation and later
Impact: Processing a maliciously crafted image may lead to unexpected app termination
Description: A buffer overflow was addressed with improved bounds checking.
CVE-2026-84571: stratan (@5tratan), Peter Malone
Available for: Apple TV 4K 2nd generation and later
Impact: Processing a maliciously crafted asset catalog may lead to unexpected process termination
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-84511: Rahul Raj, stratan (@5tratan)
Available for: A
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.