CVE-2026-43661 is a buffer overflow vulnerability identified in Apple operating systems. The flaw arises from inadequate memory handling during the processing of specially crafted images, potentially corrupting process memory. The vulnerability has been addressed by Apple through improved memory management techniques. The fix is included in version 26.5 of iOS, iPadOS, macOS Tahoe, tvOS, and watchOS. The CVSS v3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service).

Successful exploitation of this vulnerability can lead to process memory corruption, resulting in denial of service conditions. There is no indication of confidentiality or integrity impact. The vulnerability can be exploited remotely without authentication or user interaction.

This vulnerability is fixed in Apple operating system versions iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5. Users and administrators should apply these official updates to remediate the issue. No additional mitigation guidance is provided or required.