CVE-2026-43780

Published Jul 27, 2026

Last updated 2 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-43780 describes an integer overflow vulnerability found in Apple's ImageIO component. This flaw was resolved through improved input validation. When a maliciously crafted texture or image is processed, this vulnerability can lead to unexpected application termination or memory corruption. Apple has addressed this issue in updates for iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Description: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted texture may lead to unexpected app termination.
Source: product-security@apple.com
NVD status: Analyzed
Products: ipados, iphone_os, macos, tvos, visionos, watchos

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-190

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 5

macOS 26.6 just shipped. Possibly Apple's largest security advisory ever by CVE count. 3 issues that I reported were patched: CVE-2026-43780, CVE-2026-43733, CVE-2026-43729. https://t.co/yQ9vtyNo1s https://t.co/Ls3Jy2kgTi
@izobashi
28 Jul 2026
2678 Impressions
2 Retweets
42 Likes
7 Bookmarks
2 Replies
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "AB0E13A1-17E9-4198-A359-304F8145F34F",
            "versionEndExcluding": "26.6",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "622D61A7-C893-4550-800A-8CEDE14F3033",
            "versionEndExcluding": "26.6",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "9FFAC61B-E4F2-49AF-9897-96D35FAD611C",
            "versionEndExcluding": "14.8.8",
            "versionStartIncluding": "14.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B3E01512-81BB-4C92-B0A5-C07F1C1A432E",
            "versionEndExcluding": "15.7.8",
            "versionStartIncluding": "15.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "8D3D83F1-07DF-47C2-9F3B-0BC5A1434606",
            "versionEndExcluding": "26.6",
            "versionStartIncluding": "26.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "D461E49C-A6FA-4AFD-B557-FB066243A708",
            "versionEndExcluding": "26.6",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "927CD91A-3CC7-42CE-BD20-CD6D7C9B4984",
            "versionEndExcluding": "26.6",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "BDA04143-9B99-429E-8970-B13AB5DBCDDC",
            "versionEndExcluding": "26.6",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.