CVE-2026-65367 - A null pointer dereference was addressed with improved input validation · CoreCVE

Back Back to CVE browser

MEDIUM

A null pointer dereference was addressed with improved input validation

Published Aug 25, 2026

5.5

MEDIUM

CVSS 3.1

EPSS 0.14%

Description

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination.

Affected products

Vendor Apple Product iOS and iPadOS Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <18.7.9
- Version
  0
  Status
  affected
  Constraints
  <26.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
0	affected	<18.7.9
0	affected	<26.5

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (2)

https://support.apple.com/en-us/127110
Vendor AdvisoryRelease Notes
https://support.apple.com/en-us/127111
Vendor AdvisoryRelease Notes

Link	Providers	Tags
https://support.apple.com/en-us/127110		Vendor AdvisoryRelease Notes
https://support.apple.com/en-us/127111		Vendor AdvisoryRelease Notes

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Aug 25, 2026

Updated Aug 26, 2026

Reserved Jul 22, 2026

Link CVE-2026-65367

CISA Vulnrichment

Updated Aug 26, 2026

Status Analyzed

Modified Aug 27, 2026

Link CVE-2026-65367

Severity n/a

Public date n/a

Links CVE-2026-65367