CVE-2026-64705

Published: Aug 25, 2026Modified: Sep 14, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.

Affected (2)

Products: Apple: Macos

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	14.0 ≤ version < 14.8.7
Apple Macos	15.0 ≤ version < 15.7.7

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (4)

https://support.apple.com/en-us/127116

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/127117

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/128066

Source: product-security@apple.com

https://support.apple.com/en-us/128067

Source: product-security@apple.com

Timeline

No history available yet.