CVE-2026-64752

Published: Sep 14, 2026Modified: Sep 16, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected (4)

Products: Apple: Ipados, Iphone Os, Macos, Visionos

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	version < 27.0
Apple Iphone Os	version < 27.0
Apple Macos	version < 27.0
Apple Visionos	version < 27.0

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

https://support.apple.com/en-us/149034

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/149035

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/149038

Source: product-security@apple.com

Release NotesVendor Advisory

Timeline

No history available yet.