Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
Published: 2026-10-20
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Use‑after‑free leading to memory corruption or application crash
Action: Apply Patch
AI Analysis

Impact

The vulnerability is a use‑after‑free in Apple’s media file handler. When a specially crafted media file is processed, the code accesses memory that has already been freed, which can cause memory corruption or unexpected application termination. The flaw is a classic use‑after‑free bug (CWE‑416) and does not indicate remote code execution; its effect is limited to stability loss.

Affected Systems

The flaw impacts Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions before the releases that include the fix. The patch is delivered in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. Devices running earlier builds are vulnerable.

Risk and Exploitability

The CVSS score is 5.4, and the EPSS score is less than 1 %, indicating a low likelihood of exploitation; the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be a malicious media file supplied to the target system. The resulting risk is primarily operational disruption from crashes or memory corruption rather than data breach or confidentiality loss.

Generated by OpenCVE AI on October 20, 2026 at 18:24 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest operating‑system update for the relevant Apple platform to obtain the fix for the use‑after‑free bug.
  • If an update cannot be applied immediately, limit or block media playback from untrusted or external sources to prevent the vulnerable code from processing malicious files.
  • Apply device restrictions or use a sandboxed media player where available to constrain the impact of any media‑related vulnerabilities.

Generated by OpenCVE AI on October 20, 2026 at 18:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 09 Nov 2026 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os

Tue, 20 Oct 2026 18:45:00 +0000

Type Values Removed Values Added
Title Use‑after‑Free in Apple Media File Handler Causing Memory Corruption and App Termination

Tue, 20 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Title Use‑after‑Free in Apple Media File Handler Causing Memory Corruption and App Termination
Weaknesses CWE-416

Tue, 20 Oct 2026 04:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos

Tue, 20 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
Description A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Tvos Visionos Watchos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-10-26T20:43:21.375Z

Reserved: 2026-09-08T16:43:41.875Z

Link: CVE-2026-86913

cve-icon Vulnrichment

Updated: 2026-10-20T14:56:09.820Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-20T01:17:26.893

Modified: 2026-11-09T18:07:29.903

Link: CVE-2026-86913

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T18:30:16Z

Weaknesses