---
id: "CVE-2026-86953"
kind: "vulnerability"
aliases: ["CVE-2026-86953"]
title: "Apple OS: out-of-bounds write lets nearby attacker crash devices"
severity: "medium"
cvss: 4.6
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["apple", "ios", "ipados", "macos", "other"]
not_affected_if: []
published_at: "2026-10-20T01:17:28+00:00"
first_seen_at: "2026-10-23T21:57:19+00:00"
updated_at: "2026-10-25T04:35:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86953", "first_seen_at": "2026-10-23T21:57:19+00:00"}]
---

# Apple OS: out-of-bounds write lets nearby attacker crash devices

Apple's advisory describes an out-of-bounds write that was fixed with better bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27. An attacker in physical proximity may be able to cause a denial of service, meaning a crash or hang of the device.

_Summary, check and fix written by a model from the sources; labelled as such._

## Fix

- Update to iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 or watchOS 27 (the fixed release is not named in the sources)

## Timeline

- 2026-10-23T21:57:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-86953

## From the sources

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_