CVE-2026-28897

The record

A buffer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A local user may be able to cause unexpected system termination or read kernel memory.

Affected packages

Related vulnerabilities

• CVE-2026-107705 Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in… CWE-121
• CVE-2026-95818 A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc)… CWE-121
• CVE-2026-61548 Rsyslog is a rocket-fast system for log processing. CWE-121
• CVE-2026-19774 BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. CWE-121
• CVE-2026-19542 Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may… CWE-121
• CVE-2026-15419 In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged… CWE-121
• CVE-2026-88047 Tesseract is an open source OCR engine. CWE-121
• CVE-2026-88289 GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length… CWE-121