CVE-2026-20639 PUBLISHED

Assigner: apple
Reserved: 11.11.2025 Published: 25.03.2026 Updated: 25.03.2026

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption.

Product Status

Vendor Apple
Product macOS
Versions
  • affected from 0 to 14.8.5 (excl.)
  • affected from 0 to 15.7.5 (excl.)
  • affected from 0 to 26.3 (excl.)

References

Problem Types

  • Processing a maliciously crafted string may lead to heap corruption