Medium severity4.3NVD Advisory· Published Sep 14, 2026· Updated Sep 18, 2026
CVE-2026-84571
CVE-2026-84571
Description
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.
Affected products
12cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: = 27
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: = 27
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: = 27
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: = 27
- Range: = 27
- Range: = 27
Patches
Vulnerability mechanics
References
5- support.apple.com/en-us/149034nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149035nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149036nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149037nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149038nvdRelease NotesVendor Advisory
News mentions
4- Apple visionOS: 25 Vulnerabilities Patched in Same-Day DisclosureVypr Intelligence · Sep 14, 2026
- watchOS: 25 Vulnerabilities Patched in Same-Day Apple Security UpdateVypr Intelligence · Sep 14, 2026
- Apple tvOS: 25 Vulnerabilities Patched in Same-Day DisclosureVypr Intelligence · Sep 14, 2026
- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026