Memory Corruption Issue in Apple Products due to Malicious Media Files
CVE-2026-28956

Currently unrated

Key Information:

Vendor

Apple

Vendor
CVE Published:
11 May 2026

What is CVE-2026-28956?

This vulnerability involves a memory corruption issue that arises when processing specially crafted media files, which can lead to unintended app termination or memory corruption in affected Apple devices. Apple has addressed this flaw with enhanced input validation in the latest versions of their operating systems, including iOS 26.5, iPadOS 26.5, and others. Users are urged to update their devices to mitigate potential risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 26.5

macOS 0 < 14.8.7

macOS 0 < 15.7.7

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.