CVE-2026-43661

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.

Affected Software

VendorProductVersion RangeStatus
AppleiOS and iPadOS0 < 26.5affected
ApplemacOS0 < 26.5affected
AppletvOS0 < 26.5affected
ApplewatchOS0 < 26.5affected

Weaknesses

  • Processing a maliciously crafted image may corrupt process memory

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References