--- id: "CVE-2026-86870" page: "https://infrastack.ai/live/CVE-2026-86870" kind: "vulnerability" aliases: ["CVE-2026-86870"] title: "A heap buffer overflow was addressed with improved bounds checking" severity: "medium" cvss: 6.5 epss: null exploited: false status: "open" category: "vendor" products: [{"name": "apple ipados", "fixed": ["26.7"], "affected": "< 26.7", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["26.7"], "affected": "< 26.7", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["27.0"], "affected": "< 27.0", "ecosystem": "vendor"}, {"name": "apple visionos", "fixed": ["27.0"], "affected": "< 27.0", "ecosystem": "vendor"}, {"name": "apple watchos", "fixed": ["27.0"], "affected": "< 27.0", "ecosystem": "vendor"}] ecosystems: ["vendor"] tags: ["apple", "apple-watch", "vendor", "vendor-advisory", "watchos"] not_affected_if: ["already-on-watchos-27"] published_at: "2026-09-14T21:17:38+00:00" first_seen_at: "2026-11-10T00:17:03+00:00" updated_at: "2026-11-10T00:28:45+00:00" sources: [{"source": "lab", "url": "https://support.apple.com/en-us/149037", "first_seen_at": "2026-11-10T00:17:03+00:00"}, {"source": "lab", "url": "https://support.apple.com/en-us/149038", "first_seen_at": "2026-11-10T00:17:04+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86870", "first_seen_at": "2026-11-10T00:28:45+00:00"}] exploit_sources: [] --- # A heap buffer overflow was addressed with improved bounds checking Link for people: https://infrastack.ai/live/CVE-2026-86870 (this .md is for agents) This is one entry in Apple's watchOS 27 security notes, which list many fixed flaws across system components. The excerpt does not describe CVE-2026-86870 itself, so its impact is unknown. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - vendor:apple ipados affected < 26.7 fixed 26.7 - vendor:apple iphone os affected < 26.7 fixed 26.7 - vendor:apple macos affected < 27.0 fixed 27.0 - vendor:apple visionos affected < 27.0 fixed 27.0 - vendor:apple watchos affected < 27.0 fixed 27.0 ## How to check - Check the installed version on the Apple Watch: Settings > General > About, or in the Watch app on iPhone under General > About. - Compare it with the watchOS 27 release listed in the Apple advisory. ## Fix - watchOS 27: the sources give a release date of September 14, 2026 and say the fixes are in that release, but do not name a fixed build number for this CVE. ## Timeline - 2026-11-10T00:17:03+00:00 lab https://support.apple.com/en-us/149037 — Apple: About the security content of watchOS 27 - Apple Support - 2026-11-10T00:17:04+00:00 lab https://support.apple.com/en-us/149038 — Apple: About the security content of visionOS 27 - Apple Support - 2026-11-10T00:28:45+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-86870 ## Documents - [advisory] Apple: About the security content of macOS Golden Gate 27 - Apple Support https://support.apple.com/en-us/149035 - [advisory] Apple: About the security content of visionOS 27 - Apple Support https://support.apple.com/en-us/149038 - [advisory] Apple: About the security content of iOS 26.7 and iPadOS 26.7 - Apple Support https://support.apple.com/en-us/149041 - [advisory] Apple: About the security content of iOS 27 and iPadOS 27 - Apple Support https://support.apple.com/en-us/149034 - [advisory] Apple: About the security content of watchOS 27 - Apple Support https://support.apple.com/en-us/149037 - [mentions] Apple: About the security content of watchOS 27 - Apple Support https://support.apple.com/en-us/149037 - [mentions] Apple: About the security content of visionOS 27 - Apple Support https://support.apple.com/en-us/149038 ## From the sources About the security content of watchOS 27 - Apple Support # About the security content of watchOS 27 This document describes the security content of watchOS 27. ## About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page. Apple security documents reference vulnerabilities by CVE-ID when possible. For more information about security, see the Apple Product Security page. ## watchOS 27 Released September 14, 2026 ### Accelerate Framework Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted image may lead to unexpected process termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86882: Peter Malone ### Accelerate Framework Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86918: Arni Hardarson (Neonix Security) Entry added October 19, 2026 ### Accessibility Available for: Apple Watch Series 9 and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved data protection. CVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433) ### APFS Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84523: Cem Onat Karagun, an anonymous researcher ### App Store Available for: Apple Watch Series 9 and later Impact: A local app may be able to read a persistent account identifier Description: A permissions issue was addressed with additional restrictions. CVE-2026-86888: Zhongcheng Li (CK01) ### App Intents Available for: Apple Watch Series 9 and later Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved access restrictions. CVE-2026-84582: Zhongcheng Li (CK01) Entry added October 19, 2026 ### Apple Account Available for: Apple Watch Series 9 and later Impact: A malicious application may be able to leak sensitive user information Description: An information disclosure issue was addressed with improved state management. CVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01) ### AppleAVD Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. CVE-2026-65407: Franco Belman at Blackwing Intelligence ### Audio Available for: Apple Watch Series 9 and later Impact: An app may be able to leak sensitive user information Description: A logic issue was addressed with improved checks. CVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin ### AuthKit Available for: Apple Watch Series 9 and later Impact: A local app may be able to read a persistent account identifier Description: A permissions issue was addressed with additional restrictions. CVE-2026-84583: Zhongcheng Li from IES Red Team ### AVEVideoEncoder Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination Description: The issue was addressed with improved checks. CVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research ### AVEVideoEncoder Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination Description: A type confusion issue was addressed with improved memory handling. CVE-2026-84616: Peter Malone ### AVEVideoEncoder Available for: Apple Watch Series 9 and later Impact: A sandboxed app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state management. CVE-2026-84607: Ruslan Dautov ### Bluetooth Available for: Apple Watch Series 9 and later Impact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. ### Bluetooth Available for: Apple Watch Series 9 and later Impact: An app may gain unauthorized access to Bluetooth Description: An authorization issue was addressed with improved state management. CVE-2026-84560: an anonymous researcher ### Bluetooth Available for: Apple Watch Series 9 and later Impact: An attacker in radio range may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84613: jioundai Entry added October 19, 2026 ### CloudKit Available for: Apple Watch Series 9 and later Impact: A local app may be able to read a persistent account identifier Description: An information disclosure issue was addressed with improved state management. CVE-2026-86895: Stanislav Jelezoglo ### CloudKit Available for: Apple Watch Series 9 and later Impact: An app may be able to read device name Description: A permissions issue was addressed with additional restrictions. CVE-2026-86893: Heiner Gerdes ### copyfile Available for: Apple Watch Series 9 and later Impact: An archive may be able to bypass Gatekeeper Description: A file quarantine bypass was addressed with additional checks. CVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher ### Core Bluetooth Available for: Apple Watch Series 9 and later Impact: An app may be able to access Bluetooth device information Description: An authorization issue was addressed with improved state management. CVE-2026-86891: Dawuge of Shuffle Team ### Core Bluetooth Impact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory CVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien Entry added October 26, 2026 ### CoreMedia Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86876: Chris Bailey - Short Circuit ### CoreMedia Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: A use after free issue was addressed with improved memory management. CVE-2026-86913: Meta Product Security Entry added October 19, 2026 ### CoreMotion Available for: Apple Watch Series 9 and later Impact: An app may be able to access motion data from headphones without user consent CVE-2026-43737: Stuart Wallace ### CoreText Impact: Processing web content may lead to a denial-of-service CVE-2026-65412: Pavan Nallamothu ### CoreText Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-84596: ret2happy, Meta Product Security ### CoreUI Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re) ### CoreUI Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-84571: stratan (@5tratan), Peter Malone ### CoreUI Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted asset catalog may lead to unexpected process termina --- _Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_