CVE-2026-43776

HIGH

Apple Ios And iPadOS - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Title source: rule

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

References (3)

Core 3

Core References

https://support.apple.com/en-us/128066

https://support.apple.com/en-us/128067

https://support.apple.com/en-us/128071

Scores

CVSS v3 7.8

EPSS 0.0015

EPSS Percentile 5.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-120

Status published

Products (6)

Apple/iOS and iPadOS < 26.6

apple/ipados < 26.6

apple/iphone_os < 26.6

Apple/macOS < 15.7.8

Apple/macOS < 26.6

apple/macos 15.0 - 15.7.8

Published Jul 27, 2026

Tracked Since Jul 28, 2026