/sbin/ping -G sweepmax has no bounds check on macOS: deterministic BSS out-of-bounds write, confirmed by Apple

/sbin/ping on macOS contains a vulnerability in the -G sweepmax option where there is no bounds checking, leading to a deterministic out-of-bounds write in the BSS segment. This issue has been confirmed by Apple but no patch or remediation details are provided in the available information.

• github.com/apple-oss-distributions/network_cmds (opens in a new tab)
• reddit.com/r/netsec/comments/1tcbp38/sbinping_g_sweepmax_has_no_bounds_check_on_macos/ (opens in a new tab)

• php2bitcoin x brotli2coin: live hacking streamNews2026-10-30
• Stopping Remote Code Execution with Sandboxes, CVE-2026-115995: Rust ZipMediumVulnerability2026-10-29
• XML Signature Wrapping authentication bypass in Moldova's MPass SAML NuGet library, fixed in 10.0.4 (CVE requested, CAN-2026-2041077)MediumVulnerability2026-10-29
• New Kerberos Abuse Path Discovery - Constrained Delegation without Protocol Transition against SPN-less accountsNews2026-10-27
• The Gentlemen: A closer look at a not-so-gentle ransomware-as-a-service operationMalware2026-10-27