Executive brief
A memory corruption vulnerability exists in Apple's operating systems, including iOS, macOS, and watchOS. An attacker could exploit this by tricking a user into opening a specially crafted video file. Successful exploitation could lead to unexpected application crashes or service interruptions.
Technical details
A memory corruption vulnerability exists in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, and watchOS) due to improper memory handling when processing video files. An attacker can exploit this by providing a maliciously crafted video file to the system. The primary impact is unexpected application termination (denial of service). The issue has been addressed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6 through improved memory handling.
Affected products
- Apple iOS and iPadOS Before 26.6
- Apple macOS Sequoia Before 15.7.8
- Apple macOS Sonoma Before 14.8.8
- Apple macOS Tahoe Before 26.6
- Apple tvOS Before 26.6
- Apple visionOS Before 26.6
- Apple watchOS Before 26.6
Timeline
- 2026-07-27: advisory
- 2026-07-27: disclosed
- 2026-07-27: patched