Description
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
Published: 2026-09-14
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Unexpected system termination (Denial of Service).
Action: Apply update
AI Analysis

Impact

An integer overflow in Apple operating systems could be triggered if numeric inputs are not correctly limited. The flaw can cause the system to terminate unexpectedly, which may result in a denial‑of‑service condition. The issue is identified as CWE‑190.

Affected Systems

The vulnerability affects Apple iOS, iPadOS, and macOS. Versions released before iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7 are vulnerable.

Risk and Exploitability

The CVSS score of 5.5 indicates medium severity, and the EPSS score of less than 1% shows a low likelihood of exploitation. The flaw is not listed in the CISA KEV catalog. The exploit would rely on an application or input that supplies large numeric values; based on the description, the attack vector is inferred to be through a malicious application or crafted data, but this is not explicitly confirmed in the CVE entry.

Generated by OpenCVE AI on September 20, 2026 at 22:09 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest iOS or iPadOS update (26.7, 27, or newer).
  • Install the latest macOS update (Golden Gate 27, Sequoia 15.8, Tahoe 26.7, or newer).
  • If an update cannot be applied, restrict or remove applications that might supply untrusted numeric input until a patch is available.

Generated by OpenCVE AI on September 20, 2026 at 22:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 22:30:00 +0000

Type Values Removed Values Added
Title Integer Overflow Allowing System Crash on Apple iOS, iPadOS, and macOS

Sun, 20 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
Title Integer Overflow in Input Validation Allows Unexpected System Termination on Apple OSes
Weaknesses CWE-680

Thu, 17 Sep 2026 22:30:00 +0000

Type Values Removed Values Added
Title Integer Overflow in Input Validation Allows Unexpected System Termination on Apple OSes
Weaknesses CWE-680

Thu, 17 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os

Thu, 17 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-190
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 16 Sep 2026 10:00:00 +0000

Type Values Removed Values Added
Title Integer Overflow Causing Unexpected System Termination in Apple Operating Systems
Weaknesses CWE-189

Tue, 15 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
Title Integer Overflow Causing Unexpected System Termination in Apple Operating Systems
Weaknesses CWE-189

Tue, 15 Sep 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Vendors & Products Apple
Apple ios And Ipados
Apple macos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-17T15:58:39.567Z

Reserved: 2026-07-22T00:47:18.621Z

Link: CVE-2026-65408

cve-icon Vulnrichment

Updated: 2026-09-17T15:58:34.891Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-14T21:17:24.420

Modified: 2026-09-17T18:40:17.750

Link: CVE-2026-65408

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T22:15:05Z

Weaknesses
  • CWE-190

    Integer Overflow or Wraparound