Description
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to cause a denial of service.
Published: 2026-09-14
Score: n/a
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

A buffer overflow vulnerability was identified in Apple operating systems, where insufficient bounds checking could be leveraged by a malicious application to cause a service interruption. The flaw allows a crafted input to exceed allocated memory boundaries, leading the system to terminate unexpectedly. The issue was mitigated in subsequent releases through enhanced bounds checking, implying that exploitation requires an application to provide invalid data before the system can detect it.

Affected Systems

iOS 18.7.10, 27 and iPadOS 18.7.10, 27 on iPhone and iPad devices, alongside macOS Golden Gate 27, Sequoia 15.7.8, and Sonoma 14.8.8 on Mac computers. Devices running earlier or pre‑release versions of these operating systems remain susceptible.

Risk and Exploitability

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation at this time. Although the CVSS score is not provided, the impact is a denial of service that does not require privilege escalation, suggesting that a locally privileged attacker or a compromised application could trigger the crash. The lack of specific exploit details advises administrators to treat the vulnerability as serious and to apply the available patches promptly.

Generated by OpenCVE AI on September 15, 2026 at 08:51 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the device to a patched version of iOS, iPadOS, or macOS (18.7.10, 27, Golden Gate 27, Sequoia 15.7.8, or Sonoma 14.8.8).
  • Control the installation of third‑party applications until the system is upgraded, especially on devices running unpatched versions.
  • Keep informed of additional updates or advisories from Apple by regularly reviewing the Apple Support security pages.

Generated by OpenCVE AI on September 15, 2026 at 08:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 09:15:00 +0000

Type Values Removed Values Added
Title Denial of Service via Buffer Overflow in Apple Operating Systems
Weaknesses CWE-119

Tue, 15 Sep 2026 02:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Vendors & Products Apple
Apple ios And Ipados
Apple macos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to cause a denial of service.
References

Subscriptions

Apple Ios And Ipados Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-14T20:51:03.078Z

Reserved: 2026-09-01T20:50:08.321Z

Link: CVE-2026-84489

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-14T21:17:26.657

Modified: 2026-09-14T21:17:26.657

Link: CVE-2026-84489

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-15T09:00:16Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer