CVE-2026-43667

Published: Aug 17, 2026Modified: Aug 25, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to cause a denial-of-service.

Affected (2)

Products: Apple: Ipados, Iphone Os

2 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 18.7.10
Apple Iphone Os	Before 18.7.10

Related CWEs

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (5)

https://support.apple.com/en-us/127110

Source: product-security@apple.com

https://support.apple.com/en-us/127115

Source: product-security@apple.com

https://support.apple.com/en-us/127119

Source: product-security@apple.com

https://support.apple.com/en-us/127120

Source: product-security@apple.com

https://support.apple.com/en-us/148287

Source: product-security@apple.com

Vendor Advisory

Timeline

No history available yet.