An out-of-bounds write issue was addressed by removing the vulnerable code. (CVE-2026-64763)
An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-64763) is an out-of-bounds write issue classified under CWE-787. It was mitigated by removing the vulnerable code from affected Apple operating systems. The vulnerability allows an attacker to cause unexpected app termination or execute arbitrary code by processing a maliciously crafted file. The CVSS v3.1 vector indicates it requires local access with low attack complexity, no privileges, and user interaction, but results in high confidentiality, integrity, and availability impact. The issue is resolved in the specified versions of Apple OSes.
Potential Impact
Successful exploitation can lead to arbitrary code execution or unexpected application termination, impacting confidentiality, integrity, and availability of the affected system. The attacker must have local access and require user interaction to trigger the vulnerability.
Mitigation Recommendations
A fix is available and has been applied by removing the vulnerable code. Users and administrators should update to the fixed versions: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6 to remediate this vulnerability.
An out-of-bounds write issue was addressed by removing the vulnerable code. (CVE-2026-64763)
Description
An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVSS v3.1
Score 7.8high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-64763) is an out-of-bounds write issue classified under CWE-787. It was mitigated by removing the vulnerable code from affected Apple operating systems. The vulnerability allows an attacker to cause unexpected app termination or execute arbitrary code by processing a maliciously crafted file. The CVSS v3.1 vector indicates it requires local access with low attack complexity, no privileges, and user interaction, but results in high confidentiality, integrity, and availability impact. The issue is resolved in the specified versions of Apple OSes.
Potential Impact
Successful exploitation can lead to arbitrary code execution or unexpected application termination, impacting confidentiality, integrity, and availability of the affected system. The attacker must have local access and require user interaction to trigger the vulnerability.
Mitigation Recommendations
A fix is available and has been applied by removing the vulnerable code. Users and administrators should update to the fixed versions: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6 to remediate this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-9w7q-8fhp-35qp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64763"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a6941ec9c2644c7f86cbc54
Added to database: 07/28/2026, 23:57:32 UTC
Last enriched: 07/29/2026, 11:22:05 UTC
Last updated: 09/12/2026, 22:01:35 UTC
Views: 87
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.