A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://support.apple.com/en-us/126792 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/127111 Release Notes, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.5 · appleNVD modified 2026-10-26 18:10
Affected (CPE criteria) 2
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
References 2
- https://support.apple.com/en-us/126792 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/127111 Release Notes, Vendor Advisory