Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS vulnerabilities

The issue was addressed with improved memory handling. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS and is fixed in the respective versions. Processing an audio stream in a maliciously crafted media file may terminate the process.

A memory corruption vulnerability was addressed with improved locking. It affects iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. An attacker may cause unexpected app termination.

An out-of-bounds read was addressed with improved bounds checking in Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS). An app may be able to cause a denial-of-service.

Type checking was improved in Apple systems. A remote attacker may be able to cause a denial of service.

The issue was addressed with improved bounds checks. It affects iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Processing a maliciously crafted file may lead to unexpected app termination.

An out-of-bounds write issue was addressed with improved input validation. The issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. An app may be able to cause unexpected system termination or write kernel memory.

A memory corruption issue was addressed with improved input validation. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

An information leakage issue was addressed with additional validation. Visiting a maliciously crafted website may leak sensitive data. The issue is fixed in iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.

An out-of-bounds access issue was addressed with improved bounds checking. Parsing a maliciously crafted file may lead to an unexpected app termination.

Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) have a buffer overflow addressed with improved input validation. A local user may be able to cause unexpected system termination or read kernel memory.

A permissions issue was addressed with additional restrictions in Apple systems. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to identify what other apps a user has installed.

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash.

An out-of-bounds read in the Apple kernel was addressed with improved bounds checking. An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory.

An out-of-bounds access issue was addressed with improved bounds checking. The flaw affects iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, and watchOS 11.4. An app may be able to bypass ASLR.

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user.

Apple addressed a correctness issue with improved checks in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The flaw allows an app to access sensitive user data.

Apple addressed a double free issue with improved memory management in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The flaw allows an app to cause unexpected system termination.

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.7, iPadOS 18.7, iOS 26, iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, and watchOS 26. An app may be able to cause a denial-of-service.

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26, iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, and watchOS 26. An app may be able to access sensitive user data.

An out-of-bounds write issue exists in Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) and was addressed with improved input validation. Processing a maliciously crafted video file may lead to unexpected app termination. The issue is fixed in iOS 18.7, iPadOS 18.7, iOS 26, iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26.

An out-of-bounds access issue was addressed with improved bounds checking in Apple products. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

An out-of-bounds access issue in Apple systems was addressed with improved bounds checking. The issue affects iOS 26, iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, and watchOS 26. An app may be able to cause unexpected system termination.

A permissions issue exists in Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) that was addressed with additional restrictions. An app may be able to access sensitive user data.

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26, iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, and watchOS 26. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause unexpected system termination.