CVE-2026-43771
Analyzed Analyzed - Analysis Complete

Stack Overflow in macOS Leading to DoS

Publication date: 2026-07-27

Last updated on: 2026-07-28

Assigner: Apple Inc.

Description
A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-27
Last Modified
2026-07-28
Generated
2026-08-17
AI Q&A
2026-07-28
EPSS Evaluated
2026-08-15
NVD
CVE-2026-43771
EUVD
EUVD-2026-49424

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
apple macos From 14.0 (inc) to 14.8.8 (exc)
apple macos From 15.0 (inc) to 15.7.8 (exc)
apple macos From 26.0 (inc) to 26.6 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack overflow vulnerability caused by insufficient input validation. An application could trigger this flaw to cause a denial-of-service by crashing the system or application.

Detection Guidance

This vulnerability is specific to Apple macOS versions and involves a stack overflow issue. Detection requires checking your macOS version against the patched releases. Use the command 'sw_vers' to check your macOS version. If your version is below Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6, your system is vulnerable.

Impact Analysis

An attacker could exploit this to crash your device or the vulnerable application, leading to loss of service or data. It primarily affects macOS systems running Sequoia, Sonoma, or Tahoe versions before the patched releases.

Compliance Impact

This vulnerability is a stack overflow issue that could lead to a denial-of-service. It does not directly affect compliance with standards like GDPR or HIPAA as it is a technical flaw rather than a data protection or privacy issue.

Mitigation Strategies

Update to the latest patched versions of macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6 to address the stack overflow vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-43771. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart