Buffer Overflow Vulnerability in Apple’s iOS and macOS Products
CVE-2026-86972

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-86972?

A buffer overflow vulnerability has been identified in Apple's iOS, iPadOS, and macOS platforms. This issue arises when processing specifically crafted audio files, potentially leading to memory corruption. It emphasizes the importance of improved size validation mechanisms to prevent exploitation. Users are advised to update to the latest versions of affected products to mitigate risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 26.7.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Sep 8, 2026

CVE-2026-86972 Data

JSON