CVE-2026-64773: An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wait can be stretched. in Apple container
CVE-2026-64773 is a vulnerability in Apple's container product where an attacker who can access a container's published TCP port may cause the host's forwarding process to buffer an unlimited amount of data in memory. This buffering can persist as long as the backend container connection is pending, with no limit on data volume or wait duration. The issue is fixed in container version 1.2.0.
AI Analysis
Technical Summary
This vulnerability allows an attacker with network access to a container's published TCP port to force the host's forwarding process to accumulate an unbounded amount of the attacker's data in memory. The buffering continues for the entire duration of the backend container connection establishment, without any cap on memory usage or time. This can lead to resource exhaustion on the host. The vulnerability is resolved in Apple container version 1.2.0.
Potential Impact
An attacker able to reach the container's published TCP port can cause the host system to consume excessive memory by forcing unbounded buffering of data. This can degrade host performance or cause denial of service due to resource exhaustion. There is no indication of direct code execution or data compromise from the provided information.
Mitigation Recommendations
Upgrade to Apple container version 1.2.0 or later, where this vulnerability is addressed. No other mitigation guidance is provided.
CVE-2026-64773: An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wait can be stretched. in Apple container
Description
CVE-2026-64773 is a vulnerability in Apple's container product where an attacker who can access a container's published TCP port may cause the host's forwarding process to buffer an unlimited amount of data in memory. This buffering can persist as long as the backend container connection is pending, with no limit on data volume or wait duration. The issue is fixed in container version 1.2.0.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability allows an attacker with network access to a container's published TCP port to force the host's forwarding process to accumulate an unbounded amount of the attacker's data in memory. The buffering continues for the entire duration of the backend container connection establishment, without any cap on memory usage or time. This can lead to resource exhaustion on the host. The vulnerability is resolved in Apple container version 1.2.0.
Potential Impact
An attacker able to reach the container's published TCP port can cause the host system to consume excessive memory by forcing unbounded buffering of data. This can degrade host performance or cause denial of service due to resource exhaustion. There is no indication of direct code execution or data compromise from the provided information.
Mitigation Recommendations
Upgrade to Apple container version 1.2.0 or later, where this vulnerability is addressed. No other mitigation guidance is provided.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apple
- Date Reserved
- 2026-07-20T18:10:53.025Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a8773a5acd9273b4928311e
Added to database: 08/20/2026, 21:37:41 UTC
Last enriched: 08/20/2026, 21:52:23 UTC
Last updated: 08/20/2026, 21:52:23 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.