CVE-2026-64693
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A type confusion issue was addressed with improved checks. Processing a maliciously crafted image may lead to a denial-of-service.
Risk Assessment
An attacker may cause a system or application crash by delivering a malicious image, potentially disrupting services.
Recommendation
Update Apple systems to the latest versions to avoid denial-of-service risk.
Other vulnerabilities in Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS
See all- CVE-2026-64733Critical
Data protection was improved. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to fingerprint the user.
- CVE-2026-64729Critical
Memory management was improved for a use-after-free issue. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64700Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43822Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43810Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43807Critical
A buffer overflow was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a malicious accessory to cause unexpected app termination.
- CVE-2026-43803Critical
An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a remote attacker to cause unexpected system termination.
- CVE-2026-43799Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43778Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43769Critical
An integer overflow was addressed with improved input validation. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
Original NVD description (English source)
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may lead to a denial-of-service.