CVE-2026-28990

Published May 11, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.

Analysis

Technical impact

The vulnerability allows a maliciously crafted image to corrupt process memory within Apple operating systems. The advisory notes that this corruption can occur but does not confirm it can be leveraged for code execution or broader compromise. The weakness is classified as buffer overflow (CWE-119).

Affected Systems

Apple devices running iOS 18.7.10, iPadOS 18.7.10, iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5 or earlier are affected.

Risk and Exploitability

The CVSS score is 7.5, and the EPSS score is < 1%; these metrics indicate a moderate to high severity with a very low but nonzero probability of exploitation. It is inferred that the flaw can be triggered purely by characteristics of the image data and does not require system compromise or elevated privileges to trigger the memory corruption. It is inferred that attackers could deliver a malicious image through any medium that the device’s image‑handling subsystem parses, such as email attachments, web content, or local files.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

iOS and iPadOS

affected

Version	Status	Constraints
`0`	affected	< 18.7.10
`0`	affected	< 26.5

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 14.8.7
`0`	affected	< 15.7.7
`0`	affected	< 26.5

Apple

tvOS

affected

Version	Status	Constraints
`0`	affected	< 26.5

Apple

visionOS

affected

Version	Status	Constraints
`0`	affected	< 26.5

Apple

watchOS

affected

Version	Status	Constraints
`0`	affected	< 26.5

Configuration 1 [-]

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:tvos::::::::
	cpe:2.3:o:apple:visionos::::::::
	cpe:2.3:o:apple:watchos::::::::

No data.

Vendor Product Versions

Apple

Ios And Ipados

Version	Status	Scheme	Platform
`[0,26.5)`	affected	generic	—

Apple

Macos

Version	Status	Scheme	Platform
`[0,14.8.7)`	affected	generic	—
`[0,15.7.7)`	affected	generic	—
`[0,26.5)`	affected	generic	—

Apple

Tvos

Version	Status	Scheme	Platform
`[0,26.5)`	affected	generic	—

Apple

Visionos

Version	Status	Scheme	Platform
`[0,26.5)`	affected	generic	—

Apple

Watchos

Version	Status	Scheme	Platform
`[0,26.5)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Install the latest OS update for the affected platform (e.g., iOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5). The update includes fixes for buffer overflow vulnerabilities (CWE-119).
Reboot the device after the update to reset memory state.
If an update is unavailable, block or disable processing of the vulnerable image format or restrict image handling to a sandboxed environment, thereby limiting the impact of potential buffer overflow exploits (CWE-119).

Generated by OpenCVE AI on August 17, 2026 at 23:03 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.435% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://support.apple.com/en-us/127110
https://support.apple.com/en-us/127115
https://support.apple.com/en-us/127116
https://support.apple.com/en-us/127117
https://support.apple.com/en-us/127118
https://support.apple.com/en-us/127119
https://support.apple.com/en-us/127120
https://support.apple.com/en-us/148287

History

Aug 17, 2026 11:30 PM Title updated View changes

Type	Values Removed	Values Added
Title	Memory Corruption via Malicious Image Handling on Apple Operating Systems

Aug 17, 2026 9:45 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description	The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.	The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.
References		https://support.apple.com/en-us/148287

May 12, 2026 10:15 PM Title updated View changes

Type	Values Removed	Values Added
Title		Memory Corruption via Malicious Image Handling on Apple Operating Systems

May 12, 2026 6:15 PM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title	Malicious Image–Driven Memory Corruption on Apple Operating Systems
Weaknesses	CWE-787

May 12, 2026 5:30 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple ipados Apple iphone Os
CPEs		cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:macos:::::::: cpe:2.3:o:apple:tvos:::::::: cpe:2.3:o:apple:visionos:::::::: cpe:2.3:o:apple:watchos::::::::
Vendors & Products		Apple ipados Apple iphone Os

May 12, 2026 2:15 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-119
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

May 12, 2026 12:15 AM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title		Malicious Image–Driven Memory Corruption on Apple Operating Systems
Weaknesses		CWE-787

May 11, 2026 10:30 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple ios And Ipados Apple macos Apple tvos Apple visionos Apple watchos
Vendors & Products		Apple Apple ios And Ipados Apple macos Apple tvos Apple visionos Apple watchos

May 11, 2026 8:45 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.
References		https://support.apple.com/en-us/127110 https://support.apple.com/en-us/127115 https://support.apple.com/en-us/127116 https://support.apple.com/en-us/127117 https://support.apple.com/en-us/127118 https://support.apple.com/en-us/127119 https://support.apple.com/en-us/127120