CVE-2026-28977

תיאור (מקור, אנגלית)

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted file may lead to unexpected app termination.

מדדים

CVSS 3.1

6.2 (MEDIUM) מקור הציון: CNA CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-29/9/2026

CWE

CWE-119

מוצרים מושפעים

apple: ipados; apple: iphone os; apple: macos; apple: tvos; apple: visionos; apple: watchos

קישורים

• https://support.apple.com/en-us/127110 Release NotesVendor Advisory
• https://support.apple.com/en-us/127111 Release NotesVendor Advisory
• https://support.apple.com/en-us/127115 Release NotesVendor Advisory
• https://support.apple.com/en-us/127116 Release NotesVendor Advisory
• https://support.apple.com/en-us/127117 Release NotesVendor Advisory
• https://support.apple.com/en-us/127118 Release NotesVendor Advisory
• https://support.apple.com/en-us/127119 Release NotesVendor Advisory
• https://support.apple.com/en-us/127120 Release NotesVendor Advisory