Live › vulnerability › CVE-2026-86875
Go to dashboardXcode has an input validation flaw in how it parses binaries. A maliciously crafted binary can make the app terminate unexpectedly.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run Xcode on developer machines or build agents and parse binaries from untrusted sources. The sources do not say which specific binary formats or tools trigger the flaw. unknown
No product ranges from the sources yet.
xcodebuild -version to see the installed Xcode version.27 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.
This page as .md · .json · in your agent: get_signal("CVE-2026-86875")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.