CVE-2026-28934

Analyzed Analyzed - Analysis Complete

Buffer Overflow in macOS Golden Gate 27

Publication date: 2026-09-14

Last updated on: 2026-09-15

Assigner: Apple Inc.

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-15

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-03

NVD

CVE-2026-28934

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 15.0 (inc) to 15.8 (exc)
apple	macos	From 26.0 (inc) to 26.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

A buffer overflow vulnerability exists in certain macOS versions due to insufficient bounds checking. This flaw could allow an attacker to cause unexpected system termination by mounting a specially crafted disk image.

Detection Guidance

This vulnerability is related to a buffer overflow in macOS systems when mounting disk images. Detection may involve checking system logs for crashes or unexpected terminations after mounting disk images. Monitor for system crashes or kernel panics, especially after handling disk images. Check logs with 'log show --predicate "eventMessage CONTAINS 'terminated'"' or 'log show --last boot | grep -i panic'. Ensure macOS is updated to patched versions (Golden Gate 27, Sequoia 15.8, Tahoe 26.7).

Impact Analysis

If exploited, this vulnerability may lead to system crashes or unexpected termination when mounting a malicious disk image. This could result in data loss or denial of service on affected macOS systems.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability involves a buffer overflow that could cause system termination when mounting a malicious disk image, but no compliance implications are mentioned.

Mitigation Strategies

Update to the latest versions of macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7 to address the buffer overflow issue. Avoid mounting untrusted disk images until the update is applied.

Hi! I’m here to help you understand CVE-2026-28934. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70