Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination.
Published: 2026-07-27
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A memory corruption issue arose in the parsing of video files on Apple operating systems. The vulnerability occurs when a maliciously crafted video file is processed, leading to unchecked memory access that can terminate the application. Apple has addressed the issue with improved memory handling and released fixes in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6, but an unpatched file may still cause unexpected app termination. The flaw is a classic buffer overrun (CWE‑119) and does not grant direct access to data or system privileges, affecting only the process handling the media.

Affected Systems

Apple iOS and iPadOS, macOS (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6), tvOS, visionOS, and watchOS are impacted. The fix is delivered in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Risk and Exploitability

The CVSS score of 7.8 indicates high severity, but the EPSS score of <1% reflects a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog, further indicating it has not been widely observed. Attack is presumed to be local, requiring an adversary to supply a malicious video file that is opened or played by a user. Once the file is processed, the vulnerable application crashes, resulting in a denial‑of‑service. No elevation of privilege or data theft is possible.

Generated by OpenCVE AI on August 17, 2026 at 23:10 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest OS updates that contain the memory‑correction fix, including iOS 18.7.10, iPadOS 18.7.10, iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.
  • If upgrades cannot be performed immediately, block or limit playback of external video files in applications that handle user‑supplied media, or configure the OS to use sandboxed media processing.
  • Educate users to avoid opening video files from untrusted sources and monitor for sudden app termination events as a sign of exploitation attempts.

Generated by OpenCVE AI on August 17, 2026 at 23:10 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 17 Aug 2026 23:30:00 +0000

Type Values Removed Values Added
Title Memory Corruption in Video File Parsing Causes App Crashes

Mon, 17 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Description A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination. A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination.
References

Tue, 04 Aug 2026 13:45:00 +0000

Type Values Removed Values Added
Title Memory Corruption in Video File Parsing Causes App Crashes

Mon, 03 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Title Memory Corruption in Video File Processing Leading to App Termination in Apple Operating Systems
Weaknesses CWE-120

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Memory Corruption in Video File Processing Leading to App Termination in Apple Operating Systems
Weaknesses CWE-119
CWE-120
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 28 Jul 2026 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Tvos Visionos Watchos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-17T21:30:50.463Z

Reserved: 2026-05-01T22:46:21.644Z

Link: CVE-2026-43711

cve-icon Vulnrichment

Updated: 2026-07-28T14:05:44.354Z

cve-icon NVD

Status : Modified

Published: 2026-07-27T21:16:55.113

Modified: 2026-08-17T22:17:07.670

Link: CVE-2026-43711

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-17T23:15:04Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer