CVE-2026-65344
Summary
| CVE | CVE-2026-65344 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-09-14 21:17:19 UTC |
| Updated | 2026-09-14 21:17:19 UTC |
| Description | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app termination. |
Risk And Classification
Problem Types: Processing a maliciously crafted video file may lead to unexpected app termination
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Apple | IOS And IPadOS | affected 26.7 custom | Not specified |
| CNA | Apple | IOS And IPadOS | affected 27 custom | Not specified |
| CNA | Apple | MacOS | affected 15.8 custom | Not specified |
| CNA | Apple | MacOS | affected 26.7 custom | Not specified |
| CNA | Apple | MacOS | affected 27 custom | Not specified |
| CNA | Apple | TvOS | affected 27 custom | Not specified |
| CNA | Apple | VisionOS | affected 27 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| support.apple.com/en-us/149035 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149038 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149042 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149043 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149036 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149034 | [email protected] | support.apple.com | |
| support.apple.com/en-us/149041 | [email protected] | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.