VULNERABILITY INTELLIGENCE

CVE-2026-43738

CVSS score5.5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-07-27
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-125

Primary references