CVE-2026-65347

Modified Modified - Updated After Analysis

Memory Corruption in iOS and macOS Tahoe via Image Processing

Publication date: 2026-08-17

Last updated on: 2026-09-14

Assigner: Apple Inc.

Description

The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to a denial-of-service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-17

Last Modified

2026-09-14

Generated

2026-09-27

AI Q&A

2026-08-18

EPSS Evaluated

2026-09-26

NVD

CVE-2026-65347

EUVD

EUVD-2026-60506

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ipados	to 26.6.1 (exc)
apple	iphone_os	to 26.6.1 (exc)
apple	macos	From 26.0 (inc) to 26.6.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability involves a denial-of-service issue where processing a specific image could cause a system to become unresponsive or crash. It was addressed with improved checks in certain Apple software versions.

Detection Guidance

This vulnerability is specific to Apple devices and is addressed in iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Detection involves checking the installed versions of these operating systems. No specific commands are provided in the context to detect this issue directly.

Impact Analysis

If exploited, this vulnerability could allow an attacker to cause a denial-of-service on your device by tricking you into processing a malicious image. This may result in your device freezing, crashing, or becoming temporarily unusable.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability involves a denial-of-service issue when processing an image, but no details are given about data exposure or privacy implications that would affect such regulations.

Mitigation Strategies

Update affected systems to the latest versions: iOS 26.6.1, iPadOS 26.6.1, or macOS Tahoe 26.6.2 to address the issue.

Hi! I’m here to help you understand CVE-2026-65347. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70