CVE-2026-86919

Published: Oct 20, 2026Modified: Oct 21, 2026

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.

Related CWEs

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (6)

https://support.apple.com/en-us/149034

Source: product-security@apple.com

https://support.apple.com/en-us/149035

Source: product-security@apple.com

https://support.apple.com/en-us/149038

Source: product-security@apple.com

https://support.apple.com/en-us/149041

Source: product-security@apple.com

https://support.apple.com/en-us/149042

Source: product-security@apple.com

https://support.apple.com/en-us/149043

Source: product-security@apple.com

Timeline

No history available yet.