CVE-2026-28890

MEDIUM

Apple Xcode < 26.4 - Out-of-Bounds Access

Title source: rule

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination.

References (1)

https://support.apple.com/en-us/126801

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 2.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-125

Status published

Products (2)

Apple/Xcode < 26.4

apple/xcode < 26.4

Published Mar 25, 2026

Tracked Since Mar 25, 2026