CVE-2026-64705: An app may be able to cause unexpected system termination or write kernel memory in Apple iOS and iPadOS

This vulnerability involves a buffer overflow that was mitigated by improved bounds checking in Apple operating systems. An app exploiting this flaw could cause the system to terminate unexpectedly or potentially write to kernel memory, impacting system stability and security. The flaw affects iOS and iPadOS versions prior to 26.6, as well as macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.6. The CVSS score is 5.5, indicating a medium severity level. There are no known exploits in the wild and no cloud service involvement.

An attacker with limited privileges (local access) could exploit this vulnerability to cause a denial of service by unexpected system termination or potentially corrupt kernel memory. This could affect system stability and security but does not directly impact confidentiality or integrity according to the CVSS vector.

This vulnerability is fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.6. Users and administrators should apply these official updates to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.