CVE-2026-43661

HIGH

iOS and iPadOS < 26.5 - Stack-based Buffer Overflow via Maliciously Crafted Image

Title source: llm
STIX 2.1

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.

References (4)

Core 4

Scores

CVSS v3 7.5
EPSS 0.0006
EPSS Percentile 18.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-121
Status published
Products (9)
Apple/iOS and iPadOS < 26.5
apple/ipados < 26.5
apple/iphone_os < 26.5
Apple/macOS < 26.5
apple/macos 26.0 - 26.5
Apple/tvOS < 26.5
apple/tvos < 26.5
Apple/watchOS < 26.5
apple/watchos < 26.5
Published May 11, 2026
Tracked Since May 12, 2026