CVE-2026-43738
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The issue was addressed with improved memory handling. Processing a maliciously crafted asset catalog may result in disclosure of process memory.
Risk Assessment
A malicious app may access process memory, potentially exposing sensitive data.
Recommendation
Update Apple systems to the latest versions to prevent memory disclosure.
Other vulnerabilities in Apple iOS/iPadOS/macOS
See all- CVE-2026-64762Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64738Critical
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
- CVE-2026-64695Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43757Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-65349Medium
An out-of-bounds read was addressed with improved input validation. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.
- CVE-2026-65347Medium
The issue was addressed with improved checks. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service.
- CVE-2026-65346High
An integer overflow was addressed with improved input validation. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution.
- CVE-2026-65343High
A use after free issue was addressed with improved memory management. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. A remote attacker may be able to cause unexpected system termination.
- CVE-2026-65339Medium
A logic issue was addressed with improved checks. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to leak sensitive user information.
- CVE-2026-65330Medium
The issue was addressed with improved memory handling. The fix is available in iOS 26.6.1 and iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Original NVD description (English source)
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory.