Executive brief
macOS systems contain an integer overflow vulnerability in a neural processing component that could allow a malicious app to crash the system or cause unexpected termination. This affects multiple macOS versions and could impact system stability and availability for affected users.
Technical details
An integer overflow vulnerability exists in the Apple Neural Engine component of affected macOS versions. The flaw is triggered when processing specially crafted input, resulting in an integer overflow condition. The vulnerability is addressed through improved input validation in the patched versions. An attacker with local app execution capability can trigger this vulnerability to cause unexpected system termination or denial of service. Patches are available in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
- Apple macOS Golden Gate 27
- Apple macOS Sequoia 15.8
- Apple macOS Tahoe 26.7
Timeline
- 2026-09-14: patched: Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7
- 2026-09-14: disclosed