Buffer Overflow Vulnerability in Apple iOS and iPadOS Products
CVE-2026-28858

9.8CRITICAL

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Vendor
CVE Published:
25 March 2026

What is CVE-2026-28858?

A buffer overflow vulnerability in Apple iOS and iPadOS was identified, which could allow a remote user to trigger unexpected system termination or corrupt kernel memory. This issue has been resolved with enhanced bounds checking in iOS version 26.4 and iPadOS version 26.4. Users are advised to update their devices to maintain security and stability.

Affected Version(s)

iOS and iPadOS 0 < 26.4

References

https://support.apple.com/en-us/126792

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.