Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory.
CVSS 5.5EPSS 0.196%Risk 0.56
View source- Published
- 2026-07-27 21:16:58
- Last modified
- 2026-08-17 22:17:10
- Affected versions
- <15.7.8<14.8.8
- Type
- Operating system
- VectorCVSS:3.1
- Attack vectorLocalAttack complexityLowPrivileges requiredNoneUser interactionRequiredScopeUnchangedConfidentialityHighIntegrityNoneAvailabilityNone
- Operating systems
- MacOS