CVE-2026-28875
A buffer overflow was addressed with improved bounds checking.
Published Mar 25, 2026 · updated Jun 17, 2026 · apple ipados
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 25, 2026 · NIST NVD
Detected
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service.
Jun 17, 2026 · NIST NVD
Updated
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service.
Affected
- cpe apple/ipadosversion unspecified
- cpe apple/iphone osversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-28875
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-28875
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service.
nvd.nist.gov