CVE-2026-64722
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A buffer overflow vulnerability in Apple systems, fixed with improved memory handling. Processing a 3D model may lead to disclosure of process memory.
Risk Assessment
Disclosure of process memory could allow an attacker to read sensitive data from application memory, posing a confidentiality risk.
Recommendation
It is recommended to update systems to the versions mentioned in the description immediately to mitigate the risk.
Other vulnerabilities in Apple iOS/iPadOS/macOS
See all- CVE-2026-64762Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64738Critical
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
- CVE-2026-64695Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43757Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-65349Medium
An out-of-bounds read was addressed with improved input validation. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.
- CVE-2026-65347Medium
The issue was addressed with improved checks. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service.
- CVE-2026-65346High
An integer overflow was addressed with improved input validation. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution.
- CVE-2026-65343High
A use after free issue was addressed with improved memory management. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. A remote attacker may be able to cause unexpected system termination.
- CVE-2026-65339Medium
A logic issue was addressed with improved checks. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to leak sensitive user information.
- CVE-2026-65330Medium
The issue was addressed with improved memory handling. The fix is available in iOS 26.6.1 and iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Original NVD description (English source)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a 3D model may result in disclosure of process memory.