Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-12 | 1 | Disclosure1 |
| 2026-05-25 | 1 | General1 |
It is unclear exactly which CVE this bug is as there are 3 for ImageIO in 26.5 https://support.apple.com/en-us/127110 Likely either CVE-2026-43661 or CVE-2026-28990
Post summary
The text indicates uncertainty about which of the three ImageIO CVEs applies, mentioning two candidates and linking to an Apple support page, but provides no further technical or exploit details.
CVE-2026-43661 Buffer Overflow in Apple Operating Systems via Maliciously Crafted Image Processing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-43661
Post summary
CVE-2026-43661 is a buffer overflow vulnerability in Apple OS image processing that could enable exploitation; no proof of concept, exploit code, patch, or active exploitation reports are documented.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | watchos | - | - | - |