CVE-2026-64759
High · 8.8CVSS
8.8
EPSS
0.5%
Published
Oct 26, 2026
CISA due date
—
The record
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119340 Tesseract is an open source OCR engine. CWE-190
- CVE-2026-61694 go-xrpl is a Go implementation of the XRP Ledger protocol. CWE-190
- CVE-2026-119729 A flaw was found in GStreamer. CWE-190
- CVE-2026-119719 Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability… CWE-190
- CVE-2026-119718 Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability… CWE-190
- CVE-2026-104064 Scribus before 1.6.7 contains an integer overflow vulnerability in the… CWE-190
- CVE-2026-116366 An issue has been discovered in ClickHouse Server that, under certain conditions, could… CWE-190
- CVE-2026-114691 A flaw was found in the libstdc++ component of GCC. CWE-190