VULNERABILITY INTELLIGENCE

CVE-2026-28918

CVSS score6.5 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2026-05-11

Last modified2026-10-26

Description

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Parsing a maliciously crafted file may lead to an unexpected app termination.