Description
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.
Published: 2026-08-25
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Kernel Memory Write / Potential Privilege Escalation
Action: Apply Patch
AI Analysis

Impact

A buffer overflow due to insufficient bounds checking could allow an application to overwrite kernel memory or cause an unexpected system termination. The overflow may lead to system instability or compromise the integrity of the operating system, potentially enabling escalated privileges if the attacker can inject or alter kernel data structures. The vulnerability allows direct memory manipulation at the kernel level, which is a severe weakness.

Affected Systems

Apple macOS releases prior to Sequoia 15.7.7 and Sonoma 14.8.7 are affected. Any system running an earlier build of these macOS versions could be susceptible to the overflow if within the affected code paths is executed.

Risk and Exploitability

Based on the description, it is inferred that the attack vector is local—requiring the execution of a trigger application. The EPSS score is not available and the vulnerability is not listed in CISA KEV, indicating limited publicly known exploitation data as of this analysis. The CVSS score of 5.5 indicates a moderate severity; however, because the attack vector appears to be local—requiring the presence of a trigger application—the risk to systems that do not run compromised or malicious local applications is reduced. The described impact could lead to denial‑of‑service or privilege escalation, but exploitability depends on the ability to run the vulnerable code with sufficient privileges.

Generated by OpenCVE AI on August 26, 2026 at 03:12 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade macOS to Sequoia 15.7.7 or later, or Sonoma 14.8.7 or later.
  • Restrict or remove applications that may trigger the overflow, especially those running with elevated privileges.
  • Reboot the system after patching to ensure all processes are restarted.

Generated by OpenCVE AI on August 26, 2026 at 03:12 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory. A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.
References

Thu, 27 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Wed, 26 Aug 2026 01:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-120
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 25 Aug 2026 22:45:00 +0000

Type Values Removed Values Added
Title Kernel Buffer Overflow May Cause System Crash or Memory Write
Weaknesses CWE-119

Tue, 25 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Vendors & Products Apple
Apple macos

Tue, 25 Aug 2026 19:45:00 +0000

Type Values Removed Values Added
Description A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-14T20:49:23.455Z

Reserved: 2026-07-20T18:09:24.049Z

Link: CVE-2026-64705

cve-icon Vulnrichment

Updated: 2026-08-26T00:21:55.288Z

cve-icon NVD

Status : Modified

Published: 2026-08-25T20:17:00.333

Modified: 2026-09-14T21:17:13.680

Link: CVE-2026-64705

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-26T03:15:03Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')