An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 25 Mar 2026 01:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3. Processing a maliciously crafted string may lead to heap corruption. | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: apple
Published:
Updated: 2026-03-25T00:32:30.351Z
Reserved: 2025-11-11T14:43:07.861Z
Link: CVE-2026-20639
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-03-25T01:17:04.443
Modified: 2026-03-25T01:17:04.443
Link: CVE-2026-20639
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.