CVE-2026-20657

Опубликовано: 25 мар. 2026

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. Parsing a maliciously crafted file may lead to an unexpected app termination.

Ссылки

https://support.apple.com/en-us/126792
https://support.apple.com/en-us/126793
Release Notes
Vendor Advisory
https://support.apple.com/en-us/126794
https://support.apple.com/en-us/126795
Release Notes
Vendor Advisory
https://support.apple.com/en-us/126796
Release Notes
Vendor Advisory
https://support.apple.com/en-us/126799

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 18.7.7 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 18.7.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.8.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 15.0 (включая) до 15.7.5 (исключая)

EPSS

Процентиль: 42%

0.00541

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-119

Связанные уязвимости

GHSA-qm38-v5q7-v23r

CVSS3: 6.5

github

5 месяцев назад

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5. Parsing a maliciously crafted file may lead to an unexpected app termination.

BDU:2026-04660

CVSS3: 5.5

fstec