{"id":"CVE-2026-86988","kind":"vulnerability","aliases":["CVE-2026-86988"],"related":[],"title":"Apple iOS and macOS: crafted image leaks process memory before 27.2","description":"The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.","summary":"Apple's image processing in iOS, iPadOS, macOS, tvOS, visionOS and watchOS can be made to disclose process memory when it handles a maliciously crafted image. The sources say the fix is in version 27.2 of each of those systems.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","infrastructure","ios","ipados","macos"],"not_affected_if":[],"how_to_check":"- Check the installed version under Settings > General > About (iOS and iPadOS) or About This Mac (macOS) and compare it with 27.2\n- unknown for command-line checks, the sources do not say","fix":"- Update iOS and iPadOS to `27.2`\n- Update macOS Golden Gate to `27.2`\n- Update tvOS, visionOS and watchOS to `27.2`","status":"open","published_at":"2026-10-26T21:20:37+00:00","first_seen_at":"2026-10-26T21:55:22+00:00","triaged_at":"2026-10-26T21:56:29+00:00","updated_at":"2026-10-26T21:56:29+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:56:29Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `27.2`\n- Update macOS Golden Gate to `27.2`\n- Update tvOS, visionOS and watchOS to `27.2`","reach":"unknown","title":"Apple iOS and macOS: crafted image leaks process memory before 27.2","impact":"low","summary":"Apple's image processing in iOS, iPadOS, macOS, tvOS, visionOS and watchOS can be made to disclose process memory when it handles a maliciously crafted image. The sources say the fix is in version 27.2 of each of those systems.","category":"infrastructure","nicknames":[],"who_cares":["apple","ios","macos","ipados"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker reads process memory from a crafted image","analyst_note":"Check Apple's security release notes for iOS 27.2 at the NVD entry's referenced advisory to confirm the affected image path and whether user interaction is needed.","how_to_check":"- Check the installed version under Settings > General > About (iOS and iPadOS) or About This Mac (macOS) and compare it with 27.2\n- unknown for command-line checks, the sources do not say","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Any device running an Apple OS release older than 27.2 that processes images, such as Messages, Mail or Safari, is in scope. The sources do not describe which apps or configurations are needed to reach the flaw, so unknown for narrower scope.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000609,"input_tokens":3289,"output_tokens":561,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-86988':14A,17A '27.2':11A,57B,76C,79C,83C,85C,87C,89C 'address':66C 'appl':1A,18B,23B 'check':69C 'craft':5A,47B,93C 'cve':12A,15A 'disclos':39B 'disclosur':98C 'fix':53B,73C 'gate':82C 'golden':81C 'handl':44B 'imag':6A,25B,48B,94C 'improv':68C 'infrastructur':19B 'io':2A,20B,28B,75C 'ipado':21B,29B,78C 'issu':64C,71C 'leak':7A 'maco':4A,22B,30B,80C 'made':37B 'malici':46B,92C 'may':95C 'memori':9A,41B,101C 'process':8A,26B,40B,90C,100C 'result':96C 'say':51B 'sourc':50B 'system':62B 'tvos':31B,84C 'version':56B 'visiono':32B,86C 'watcho':34B,88C","nicknames":[],"mitigations":[],"who_affected":"Any device running an Apple OS release older than 27.2 that processes images, such as Messages, Mail or Safari, is in scope. The sources do not describe which apps or configurations are needed to reach the flaw, so unknown for narrower scope.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:20:37+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86988","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86988","severity":null,"published_at":"2026-10-26T21:20:37+00:00","modified_at":"2026-10-26T21:20:37+00:00","first_seen_at":"2026-10-26T21:55:22+00:00","fetched_at":"2026-10-26T21:55:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}