CVE-2026-84519

Apple OS Out-of-Bounds Write Causing Crash

View on CVE.org
Published Sep 14, 2026 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system termination.

Analysis

AI-generated

Technical impact

An out‑of‑bounds write flaw is triggered when a disk image containing maliciously crafted data is mounted on Apple devices. The vulnerability is classified as CWE‑787, and can cause the operating system to crash or terminate unexpectedly. The flaw is mitigated by improved bounds checking in newer releases, but any older version remains vulnerable.

Affected Systems

Devices running Apple iOS, iPadOS, or macOS prior to the patch releases—iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7—are affected. All later versions contain the fix and are not impacted.

Risk and Exploitability

The CVSS score of 6.5 indicates medium severity, and the EPSS score of less than 1% shows low exploitation probability. The vulnerability is not listed in the CISA KEV catalog, and no public exploit is known. However, mounting a manipulated disk image is the required condition for exploitation, which may be possible through local or remote delivery mechanisms such as file sharing, email attachments, or device sync. Because the issue causes a denial of service, prompt remediation is advised.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update all affected Apple devices to the latest iOS, iPadOS, or macOS releases that include the bounds‑checking fix.
  • Avoid mounting disk images from unknown or unverified sources, and verify the integrity of the image before mounting.
  • If available, configure system settings to restrict or sandbox disk image mounting operations so that only trusted sources can mount images.

Generated by OpenCVE AI on September 20, 2026 at 20:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Apple OS Out-of-Bounds Write Causing Crash
Type Values Removed Values Added
Title Out‑of‑bounds write in disk‑image mounting leads to system crash
Weaknesses CWE-119
Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os
Type Values Removed Values Added
Weaknesses CWE-787
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Title Out‑of‑bounds write in disk‑image mounting leads to system crash
Weaknesses CWE-119
Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Type Values Removed Values Added
Description An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system termination.
References
Earlier changes (2)
Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Oct 26, 2026, 8:41 PM
Reserved
Sep 1, 2026, 9:13 PM

View source JSON

Updated
Sep 15, 2026, 3:10 PM

JSON

Status
Analyzed
Published
Sep 14, 2026, 9:17 PM
Modified
Sep 16, 2026, 1:07 AM

View source JSON

No data.

Updated
Sep 20, 2026, 9:00 PM

JSON