CVE-2026-64725

ANALYSIS PENDING

Apple Ios And iPadOS - Denial of Service

Title source: rule

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-64725. PoCs published by altvist.

AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2026-64725, a signed-shift vulnerability in Apple's AudioToolboxCore (AIFFAudioFile::GetMarkerList) leading to an out-of-bounds write. The PoC generates a malformed AIFF file and demonstrates the memory corruption via a minimal harness using Apple's AudioFile API.

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause a denial-of-service.

Exploits (1)

github WORKING POC

by altvist · cpoc

https://github.com/altvist/cve-2026-64725-poc

View Code ZIP pw:eip

This repository contains a functional proof-of-concept exploit for CVE-2026-64725, a signed-shift vulnerability in Apple's AudioToolboxCore (AIFFAudioFile::GetMarkerList) leading to an out-of-bounds write. The PoC generates a malformed AIFF file and demonstrates the memory corruption via a minimal harness using Apple's AudioFile API.

Classification

Working Poc 99%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: Apple AudioToolboxCore (macOS/iOS/iPadOS < 26.6)

No auth needed

Prerequisites: Target system running vulnerable version of macOS/iOS/iPadOS (< 26.6) · Python 3.6+ and clang installed for PoC generation/compilation

MITRE ATT&CK