Executive brief
The Accelerate Framework is a system library used by macOS to process images and perform computational tasks. A flaw in this component allows maliciously crafted images to cause unexpected system crashes, disrupting user operations and potentially serving as a denial-of-service vector.
Technical details
This vulnerability is an out-of-bounds read vulnerability in Apple's Accelerate Framework, addressed through improved bounds checking. The flaw occurs when processing a maliciously crafted image, allowing an attacker to read memory outside the intended buffer boundaries. The attack vector is local (requires processing the image on the target system), and successful exploitation causes unexpected process termination (denial of service). Apple patched this issue in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7, all released on 2026-09-14.
Affected products
- Apple macOS Golden Gate before 27
- Apple macOS Sequoia before 15.8
- Apple macOS Tahoe before 26.7
Timeline
- 2026-09-14: patched: Fixes released in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7
- 2026-09-14: disclosed