Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.
Published: 2026-08-17
Score: 6.6 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An out‑of‑bounds read exists in Apple iOS, iPadOS, and macOS that can be triggered by a locally running or malicious application. The flaw allows the application to read data beyond the intended buffer, exposing kernel memory contents and potentially causing the operating system to terminate unexpectedly.

Affected Systems

Apple iOS version 26.6.1, iPadOS version 26.6.1, and macOS Tahoe version 26.6.2 are affected; all earlier releases are vulnerable and no other versions or products are listed.

Risk and Exploitability

The CVSS score of 6.6 indicates moderate severity, and the EPSS score of less than 1 % shows a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires a local malicious application to provide specially crafted input; therefore the attack vector is application‑level and the impact is confined to the affected device.

Generated by OpenCVE AI on August 18, 2026 at 20:18 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade iOS to 26.6.1, iPadOS to 26.6.1, or macOS to 26.6.2 to remove the flaw.
  • If an immediate upgrade is not possible, refrain from installing applications from untrusted or unknown sources and be vigilant for unexpected system crashes.
  • Check Apple’s Security Update portal for interim guidance or patches and apply them as soon as they become available.

Generated by OpenCVE AI on August 18, 2026 at 20:18 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 18 Aug 2026 20:45:00 +0000

Type Values Removed Values Added
Title Kernel Memory Read via Out-Of-Bounds Read in Apple iOS, iPadOS, and macOS

Tue, 18 Aug 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os

Tue, 18 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Read Issue Allowing Kernel Memory Exposure and System Termination
Weaknesses CWE-20
CWE-200

Tue, 18 Aug 2026 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-125
Metrics cvssV3_1

{'score': 6.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 18 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Read Issue Allowing Kernel Memory Exposure and System Termination
Weaknesses CWE-20
CWE-200

Tue, 18 Aug 2026 00:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Vendors & Products Apple
Apple ios And Ipados
Apple macos

Mon, 17 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Description An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-18T13:17:23.125Z

Reserved: 2026-07-22T00:45:50.324Z

Link: CVE-2026-65349

cve-icon Vulnrichment

Updated: 2026-08-18T13:17:19.392Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-17T22:17:25.483

Modified: 2026-08-18T18:57:53.850

Link: CVE-2026-65349

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-18T20:30:17Z

Weaknesses