Medium severity6.5NVD Advisory· Published Mar 25, 2026· Updated May 11, 2026

CVE-2026-20657

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. Parsing a maliciously crafted file may lead to an unexpected app termination.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Ipados
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Range: <18.7.7
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <18.7.7
Apple Inc./macOS2 versions
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=14.0,<14.8.5
- (no CPE)range: 0
Apple Inc./Visionosllm-fuzzy
Cisco Systems, Inc./Cisco iOSllm-fuzzy
Apple Inc./macOS Sequoiallm-fuzzy
Apple Inc./iOS and iPadOScpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

support.apple.com/en-us/126793nvdRelease NotesVendor Advisory
support.apple.com/en-us/126795nvdRelease NotesVendor Advisory
support.apple.com/en-us/126796nvdRelease NotesVendor Advisory
support.apple.com/en-us/126792nvd
support.apple.com/en-us/126794nvd
support.apple.com/en-us/126799nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000