AI analysis
CVE-2026-65395 is an out-of-bounds write vulnerability in Apple's image processing code that was fixed with improved bounds checking; processing a maliciously crafted image can corrupt memory on an unpatched device. The flaw is triggered simply by an application parsing a hostile image file, which in practice means a victim could be affected by receiving or previewing an image in apps such as Messages, Mail, or a web page. Successful exploitation of memory corruption of this type can plausibly lead to application crashes or arbitrary code execution within the parsing process, though Apple has not stated that it has been exploited. Affected users are those on iOS/iPadOS versions prior to 26.7 (and not on 27), macOS Sequoia prior to 15.8, macOS Tahoe prior to 26.7, macOS Golden Gate prior to 27, tvOS prior to 27, and visionOS prior to 27. The issue has no CVSS score yet, is not in the CISA KEV catalog, and no public proof of concept is known.
What to do: Update all Apple devices to the fixed releases: iOS/iPadOS 26.7 or 27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, and visionOS 27; use MDM to push these updates across managed fleets and audit for devices still on older OS builds. Because the flaw can trigger during image preview, users should treat unsolicited images in Messages, Mail, and on the web with caution until patched. Monitor Apple security advisories and crash logs for signs of image-parsing crashes, and revisit KEV/CVSS status once scored.
Affected
| Apple iOS | versions prior to iOS 26.7 and prior to iOS 27 |
| Apple iPadOS | versions prior to iPadOS 26.7 and prior to iPadOS 27 |
| Apple macOS Sequoia | versions prior to 15.8 |
| Apple macOS Tahoe | versions prior to 26.7 |
| Apple macOS Golden Gate | versions prior to 27 |
| Apple tvOS | versions prior to 27 |
| Apple visionOS | versions prior to 27 |
Estimated exposure
mass≈1-2+ billion Apple devices (Apple's active installed base exceeds 2 billion devices) — Apple's publicly disclosed active device installed base is over 2 billion iPhones, iPads, Macs, Apple TVs, and Vision Pros, and unpatched devices running any affected OS version are exposed until updated.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption.