Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-28977

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted file may lead to unexpected app termination.

VectorLOCAL

PublishedMay 11, 2026, 21:18

Published Byproduct-security@apple.com

Base Score

Score6.2

Affected Versions

No affected versions found.

References

https://support.apple.com/en-us/127110
https://support.apple.com/en-us/127111
https://support.apple.com/en-us/127115
https://support.apple.com/en-us/127116
https://support.apple.com/en-us/127117
https://support.apple.com/en-us/127118
https://support.apple.com/en-us/127119
https://support.apple.com/en-us/127120

Weakness Type

CWE-119

CVSS Metrics

Base Score

6.2

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL