Out-of-Bounds Read in Xcode Affects Apple Products
CVE-2026-86874

3.3LOW

Key Information:

Vendor

Apple
Status
Xcode
Vendor
CVE Published:
20 October 2026

What is CVE-2026-86874?

An out-of-bounds read vulnerability has been identified in Xcode, which could lead to unexpected termination of the tool. This issue arises from insufficient input validation while parsing maliciously crafted binaries. The problem has been addressed in Xcode 27, allowing users to continue using the software securely without the risk of exploitation from crafted inputs.

Affected Version(s)

Xcode 0 < 27

References

https://support.apple.com/en-us/149040

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.