An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.
Problem type
- Processing a maliciously crafted image may lead to arbitrary code execution
Affected products
Apple
< 26.6 - AFFECTED
< 14.8.8 - AFFECTED
< 15.7.8 - AFFECTED
< 26.6 - AFFECTED
References
https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128071
https://support.apple.com/en-us/128072
GitHub Security Advisories
GHSA-v3r2-67q9-p9cr
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6...
https://github.com/advisories/GHSA-v3r2-67q9-p9crAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.
https://nvd.nist.gov/vuln/detail/CVE-2026-43818
https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128071
https://support.apple.com/en-us/128072
https://github.com/advisories/GHSA-v3r2-67q9-p9cr
JSON source
https://cveawg.mitre.org/api/cve/CVE-2026-43818Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-43818",
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"dateUpdated": "2026-07-27T20:13:44.522Z",
"dateReserved": "2026-05-01T22:46:27.822Z",
"datePublished": "2026-07-27T20:13:44.522Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple",
"dateUpdated": "2026-07-27T20:13:44.522Z"
},
"descriptions": [
{
"lang": "en",
"value": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution."
}
],
"affected": [
{
"vendor": "Apple",
"product": "iOS and iPadOS",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "26.6"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "14.8.8"
},
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "15.7.8"
},
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "26.6"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Processing a maliciously crafted image may lead to arbitrary code execution"
}
]
}
],
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
}
}