Description
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination.
Published: 2026-08-25
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Update
AI Analysis

Impact

A null pointer dereference in Apple iOS and iPadOS may allow an application to trigger an unexpected system termination, effectively causing a denial of service. This vulnerability is a classic example of CWE‑476 and directly compromises system availability for the affected device.

Affected Systems

The flaw affects Apple iOS and iPadOS running versions prior to 18.7.9 or 26.5. The security fix was delivered in iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, and iPadOS 26.5 as announced by Apple.

Risk and Exploitability

The risk is limited to denial of service through application‑initiated crashes; there is no remote code execution or data disclosure. The CVSS score of 5.5 indicates moderate severity. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is the installation or execution of a malicious or poorly written application that exploits the null pointer. Exploitation requires the victim to run the offending app, and therefore is confined to local device usage.

Generated by OpenCVE AI on August 26, 2026 at 03:11 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest iOS or iPadOS release (18.7.9 or 26.5)
  • Remove or disable any applications suspected of exploiting the null pointer prior to applying the update
  • After updating, reboot the device to clear any residual memory and ensure the OS runs the fixed kernel components

Generated by OpenCVE AI on August 26, 2026 at 03:11 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 27 Aug 2026 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os

Wed, 26 Aug 2026 03:30:00 +0000

Type Values Removed Values Added
Title Null Pointer Dereference Leading to System Crash in iOS and iPadOS

Wed, 26 Aug 2026 01:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 25 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Vendors & Products Apple
Apple ios And Ipados

Tue, 25 Aug 2026 19:45:00 +0000

Type Values Removed Values Added
Description A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-26T00:22:36.758Z

Reserved: 2026-07-22T00:46:16.023Z

Link: CVE-2026-65367

cve-icon Vulnrichment

Updated: 2026-08-26T00:22:30.126Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-25T20:17:00.640

Modified: 2026-08-27T14:50:03.580

Link: CVE-2026-65367

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-26T03:15:03Z

Weaknesses