Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted image may result in disclosure of process memory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-11 | 1 | General1 |
| 2026-02-12 | 1 | Patch1 |
Excited to share my first Apple CVEs in ImageIO 🎉 CVE-2026-20675 CVE-2026-20634 Thanks to Apple Product Security and Trend Micro’s Zero Day Initiative (ZDI) for the coordinated disclosure https://t.co/S4H1Bm8P57
Post summary
The tweet announces two Apple ImageIO CVEs and thanks for coordinated disclosure, but offers no technical, exploit, or mitigation details.
CVE-2026-20634 The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, macOS Sequoia 15.7.4, iO… https://www.cve.org/CVERecord?id=CVE-2026-20634
Post summary
Apple has released patches for CVE-2026-20634 across multiple OS versions, addressing the memory handling vulnerability.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | visionos | - | - | - |
| OS | apple | watchos | - | - | - |