CVE-2026-28858
A buffer overflow was addressed with improved bounds checking.
Published Mar 25, 2026 · updated Jun 17, 2026 · apple ipados
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 25, 2026 · NIST NVD
Detected
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Jun 17, 2026 · NIST NVD
Updated
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
Affected
- cpe apple/ipadosversion unspecified
- cpe apple/iphone osversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-28858
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-28858
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
nvd.nist.gov