CVE-2026-86918 PUBLISHED

Assigner: apple
Reserved: 08.09.2026 Published: 20.10.2026 Updated: 20.10.2026

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.

Product Status

Vendor Apple
Product iOS and iPadOS
Versions
  • affected from 0 to 27 (excl.)
Vendor Apple
Product macOS
Versions
  • affected from 0 to 27 (excl.)
Vendor Apple
Product tvOS
Versions
  • affected from 0 to 27 (excl.)
Vendor Apple
Product visionOS
Versions
  • affected from 0 to 27 (excl.)
Vendor Apple
Product watchOS
Versions
  • affected from 0 to 27 (excl.)

References

Problem Types

  • Processing a maliciously crafted image may lead to unexpected app termination