← Back

CVE-2026-28841

nvd nist
Published: Mar 25, 2026Modified: Mar 25, 2026

JSON object

Loading...
6.2
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.5 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and unexpected app termination.

Affected (1)

Products: Apple: Macos
Apple
1 product
Macos
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Macos
From 26.0 to 26.4

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (1)

Source: product-security@apple.com
Release NotesVendor Advisory

Timeline

No history available yet.