CVE-2026-84519

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Write in Apple macOS and iOS

Publication date: 2026-09-14

Last updated on: 2026-09-16

Assigner: Apple Inc.

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-16

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-04

NVD

CVE-2026-84519

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ipados	to 26.7 (exc)
apple	iphone_os	to 26.7 (exc)
apple	macos	From 15.0 (inc) to 15.8 (exc)
apple	macos	From 26.0 (inc) to 26.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability caused by insufficient bounds checking when processing disk images. Mounting a maliciously crafted disk image could trigger unexpected system termination due to memory corruption.

Detection Guidance

This vulnerability involves an out-of-bounds write issue that may cause unexpected system termination when mounting a disk image with maliciously crafted files. Detection requires checking system logs for crashes or unexpected terminations after mounting disk images. No specific commands are provided in the context to directly detect this issue.

Impact Analysis

If exploited, this flaw could cause your device to crash unexpectedly when opening a specially crafted disk image. It does not appear to allow arbitrary code execution or data theft based on the provided information.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability involves an out-of-bounds write issue that could lead to system termination when mounting a disk image with maliciously crafted files. Without explicit details on data exposure or unauthorized access, its compliance implications remain unclear.

Mitigation Strategies

Update affected Apple devices to the latest versions: iOS 26.7 or later, iPadOS 26.7 or later, iOS 27 or later, iPadOS 27 or later, macOS Golden Gate 27, macOS Sequoia 15.8, or macOS Tahoe 26.7. Avoid mounting untrusted disk images until updates are applied.

Hi! I’m here to help you understand CVE-2026-84519. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70