VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Sep 14, 2026· Updated Sep 16, 2026

CVE-2026-84597

CVE-2026-84597

Description

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory.

Affected products

12
  • Apple Inc./iOSllm-fuzzy
    Range: = 27
  • Apple Inc./Ipadosllm-fuzzy2 versions
    = 27+ 1 more
    • (no CPE)range: = 27
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <27.0
  • Apple Inc./macOSllm-fuzzy2 versions
    = Golden Gate 27+ 1 more
    • (no CPE)range: = Golden Gate 27
    • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <27.0
  • Apple Inc./tvOSllm-fuzzy2 versions
    = 27+ 1 more
    • (no CPE)range: = 27
    • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <27.0
  • Apple Inc./Visionosllm-fuzzy2 versions
    = 27+ 1 more
    • (no CPE)range: = 27
    • cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*range: <27.0
  • Apple Inc./watchOSllm-fuzzy2 versions
    = 27+ 1 more
    • (no CPE)range: = 27
    • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <27.0
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <27.0

Patches

Vulnerability mechanics

References

5

News mentions

1