A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/149034 | Vendor Advisory |
| https://support.apple.com/en-us/149035 | Vendor Advisory |
| https://support.apple.com/en-us/149037 | Vendor Advisory |
| https://support.apple.com/en-us/149038 | Vendor Advisory |
| https://support.apple.com/en-us/149041 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
18 Sep 2026, 15:54
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple watchos
Apple ipados Apple Apple macos Apple visionos Apple iphone Os |
|
| CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
|
| References | () https://support.apple.com/en-us/149034 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149035 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149037 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149038 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/149041 - Vendor Advisory |
17 Sep 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-122 |
Information
Published : 2026-09-14 21:17
Updated : 2026-09-18 15:54
NVD link : CVE-2026-86870
Mitre link : CVE-2026-86870
CVE.ORG link : CVE-2026-86870
JSON object : View
Products Affected
apple
- macos
- iphone_os
- watchos
- ipados
- visionos
CWE
CWE-122
Heap-based Buffer Overflow