CVE-2026-64754 - An out-of-bounds write issue was addressed with improved bounds checking

Back Back to CVE browser

MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking

Published Jul 27, 2026

5.5

MEDIUM

CVSS 3.1

EPSS 0.16%

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a denial-of-service.

Affected products

Vendor Apple Product iOS and iPadOS Default
unknown
Affected
- ≥ 0, < 26.6
Vendor Apple Product macOS Default
unknown
Affected
- ≥ 0, < 14.8.8
- ≥ 0, < 15.7.8
- ≥ 0, < 26.6
Vendor Apple Product tvOS Default
unknown
Affected
- ≥ 0, < 26.6
Vendor Apple Product visionOS Default
unknown
Affected
- ≥ 0, < 26.6
Vendor Apple Product watchOS Default
unknown
Affected
- ≥ 0, < 26.6

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Apple	iOS and iPadOS	unknown	Affected ≥ 0, < 26.6
Apple	macOS	unknown	Affected ≥ 0, < 14.8.8 ≥ 0, < 15.7.8 ≥ 0, < 26.6
Apple	tvOS	unknown	Affected ≥ 0, < 26.6
Apple	visionOS	unknown	Affected ≥ 0, < 26.6
Apple	watchOS	unknown	Affected ≥ 0, < 26.6

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (8)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49465
Advisory
https://support.apple.com/en-us/128066
Release NotesVendor Advisory
https://support.apple.com/en-us/128067
Release NotesVendor Advisory
https://support.apple.com/en-us/128068
Release NotesVendor Advisory
https://support.apple.com/en-us/128069
Release NotesVendor Advisory
https://support.apple.com/en-us/128070
Release NotesVendor Advisory
https://support.apple.com/en-us/128071
Release NotesVendor Advisory
https://support.apple.com/en-us/128072
Release NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-49465		Advisory
https://support.apple.com/en-us/128066		Release NotesVendor Advisory
https://support.apple.com/en-us/128067		Release NotesVendor Advisory
https://support.apple.com/en-us/128068		Release NotesVendor Advisory
https://support.apple.com/en-us/128069		Release NotesVendor Advisory
https://support.apple.com/en-us/128070		Release NotesVendor Advisory
https://support.apple.com/en-us/128071		Release NotesVendor Advisory
https://support.apple.com/en-us/128072		Release NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Jul 27, 2026

Updated Jul 28, 2026

Reserved Jul 20, 2026

Link CVE-2026-64754

CISA Vulnrichment

Updated Jul 28, 2026

NVD

Status Analyzed

Modified Jul 29, 2026

Link CVE-2026-64754

Red Hat

No data

ENISA EUVD

Assigner apple

Published Jul 27, 2026

Updated Jul 28, 2026

Link EUVD-2026-49465

GitHub

No data