CVE-2026-64758 is a vulnerability in Apple iOS and iPadOS where processing a specially crafted file may lead to unexpected app termination due to insufficient bounds checks. Apple fixed this issue in version 26.6 of iOS, iPadOS, and other related operating systems. The vulnerability is categorized under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). The CVSS v3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation can cause unexpected termination of applications, potentially leading to denial of service and exposure of sensitive information or unauthorized modification of data due to the high impact on confidentiality, integrity, and availability.

A fix is available in iOS 26.6 and iPadOS 26.6. Users and administrators should update affected devices to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.