CVE-2026-20634 - Vulnerability Details

- Memory Disclosure via Malicious Image Processing on Apple Platforms

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may result in disclosure of process memory.

Published: 2026-02-11

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability arises from incorrect memory handling during image processing on Apple operating systems, leading a crafted image to expose portions of process memory and potentially reveal sensitive data. This fault aligns with improper memory management and results in information disclosure.

Affected Systems

Apple devices running iOS, iPadOS, macOS, tvOS, visionOS, or watchOS are affected when they are not updated to the versions specified in the advisory. The fix is available in iOS 18.7.5 and 26.3, iPadOS 18.7.5 and 26.3, macOS Sequoia 15.7.4, Sonoma 14.8.4, Tahoe 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3.

Risk and Exploitability

The CVSS base score of 5.5 indicates moderate severity. EPSS is below 1 %, meaning the chance of exploitation is low. The vulnerability is not listed in the CISA KEV catalog. Attackers would need to deliver a malicious image to the target device, likely through software that accepts image input or via a compromised app. Based on the description, the attack vector is inferred to be remote or local through unsolicited image content.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

iOS and iPadOS

affected

Version	Status	Constraints
`0`	affected	< 18.7.5
`0`	affected	< 26.3

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 14.8.4
`0`	affected	< 15.7.4
`0`	affected	< 26.3

Apple

tvOS

affected

Version	Status	Constraints
`0`	affected	< 26.3

Apple

visionOS

affected

Version	Status	Constraints
`0`	affected	< 26.3

Apple

watchOS

affected

Version	Status	Constraints
`0`	affected	< 26.3

Configuration 1 [-]

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:tvos::::::::
	cpe:2.3:o:apple:visionos::::::::
	cpe:2.3:o:apple:watchos::::::::

No data.

Vendor Product Confidence Versions

Apple

Ios And Ipados

—

Version	Status	Scheme	Platform
`[0,26.3)`	affected	generic	—

Apple

Ios And Ipados

—

Version	Status	Scheme	Platform
`[0,18.7)`	affected	generic	—

Apple

Macos

—

Version	Status	Scheme	Platform
`[0,26.3)`	affected	generic	—

Apple

Macos

—

Version	Status	Scheme	Platform
`[0,15.7)`	affected	generic	—

Apple

Macos

—

Version	Status	Scheme	Platform
`[0,14.8)`	affected	generic	—

Apple

Tvos

—

Version	Status	Scheme	Platform
`[0,26.3)`	affected	generic	—

Apple

Visionos

—

Version	Status	Scheme	Platform
`[0,26.3)`	affected	generic	—

Apple

Watchos

—

Version	Status	Scheme	Platform
`[0,26.3)`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade all affected Apple devices to the patched releases: iOS 18.7.5/26.3, iPadOS 18.7.5/26.3, macOS Sequoia 15.7.4, Sonoma 14.8.4, Tahoe 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3.
If an update cannot be applied immediately, restrict the processing of untrusted images on the device, for example by disabling features that allow arbitrary image rendering from unknown sources or by using content filters.
Maintain regular monitoring of security advisories from Apple and apply future updates promptly to mitigate similar memory handling issues.

Generated by OpenCVE AI on April 16, 2026 at 00:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00015.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://support.apple.com/en-us/126346
https://support.apple.com/en-us/126347
https://support.apple.com/en-us/126348
https://support.apple.com/en-us/126349
https://support.apple.com/en-us/126350
https://support.apple.com/en-us/126351
https://support.apple.com/en-us/126352
https://support.apple.com/en-us/126353

History

Thu, 16 Apr 2026 01:15:00 +0000

Type	Values Removed	Values Added
Title		Memory Disclosure via Malicious Image Processing on Apple Platforms

Thu, 02 Apr 2026 20:30:00 +0000

Type	Values Removed	Values Added
Description	The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3. Processing a maliciously crafted image may result in disclosure of process memory.	The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may result in disclosure of process memory.

Fri, 13 Feb 2026 20:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Apple ipados Apple iphone Os
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:macos:::::::: cpe:2.3:o:apple:tvos:::::::: cpe:2.3:o:apple:visionos:::::::: cpe:2.3:o:apple:watchos::::::::
Vendors & Products		Apple ipados Apple iphone Os

Thu, 12 Feb 2026 22:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 12 Feb 2026 09:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Apple Apple ios And Ipados Apple macos Apple tvos Apple visionos Apple watchos
Vendors & Products		Apple Apple ios And Ipados Apple macos Apple tvos Apple visionos Apple watchos

Wed, 11 Feb 2026 23:15:00 +0000

Type	Values Removed	Values Added
Description		The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3. Processing a maliciously crafted image may result in disclosure of process memory.
References		https://support.apple.com/en-us/126346 https://support.apple.com/en-us/126347 https://support.apple.com/en-us/126348 https://support.apple.com/en-us/126349 https://support.apple.com/en-us/126350 https://support.apple.com/en-us/126351 https://support.apple.com/en-us/126352 https://support.apple.com/en-us/126353

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Tvos Visionos Watchos

MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-02-11T22:58:29.889Z

Updated: 2026-04-02T18:17:57.472Z

Reserved: 2025-11-11T14:43:07.861Z

Link: CVE-2026-20634

Vulnrichment

Updated: 2026-02-12T21:21:25.891Z

NVD

Status : Modified

Published: 2026-02-11T23:16:06.610

Modified: 2026-04-02T19:21:13.567

Link: CVE-2026-20634

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-04-16T01:00:19Z

Weaknesses

NVD-CWE-noinfo

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object