Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination.
Published: 2026-07-27
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A memory corruption flaw exists in the handling of video files on Apple operating systems. The vulnerability arises when a video file is parsed, causing unchecked memory access that can terminate the application. Processing a maliciously crafted video file can lead to an unexpected app termination – an app‑level denial‑of‑service condition. The flaw is a classic buffer overrun (CWE‑119). The bug does not provide direct access to data or system privilege, and it is confined to the process that consumes the media file.

Affected Systems

Apple iOS and iPadOS, macOS (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6), tvOS, visionOS, and watchOS are impacted. The fix is delivered in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Risk and Exploitability

The CVSS score of 7.8 indicates high severity, but the EPSS score of <1% reflects a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog, further indicating it has not been widely observed. Attack is presumed to be local, requiring an adversary to supply a malicious video file that is opened or played by a user. Once the file is processed, the vulnerable application crashes, resulting in a denial‑of‑service. No elevation of privilege or data theft is possible.

Generated by OpenCVE AI on August 4, 2026 at 13:19 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest OS updates that contain the memory‑correction fix (iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6).
  • If upgrades cannot be performed immediately, block or limit playback of external video files in applications that handle user‑supplied media, or configure the OS to use sandboxed media processing.
  • Educate users to avoid opening video files from untrusted sources and monitor for sudden app termination events as a sign of exploitation attempts.

Generated by OpenCVE AI on August 4, 2026 at 13:19 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 13:45:00 +0000

Type Values Removed Values Added
Title Memory Corruption in Video File Parsing Causes App Crashes

Mon, 03 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Title Memory Corruption in Video File Processing Leading to App Termination in Apple Operating Systems
Weaknesses CWE-120

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Memory Corruption in Video File Processing Leading to App Termination in Apple Operating Systems
Weaknesses CWE-119
CWE-120
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 28 Jul 2026 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Tvos Visionos Watchos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T14:05:54.426Z

Reserved: 2026-05-01T22:46:21.644Z

Link: CVE-2026-43711

cve-icon Vulnrichment

Updated: 2026-07-28T14:05:44.354Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:16:55.113

Modified: 2026-07-28T19:31:36.677

Link: CVE-2026-43711

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T13:30:10Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer