A critical integer overflow vulnerability in Apple operating systems may allow remote attackers to execute arbitrary code via a maliciously crafted image.

The vulnerability is an integer overflow flaw that occurs during image processing. An unauthenticated attacker could trigger this issue by providing a specially crafted image to the victim, potentially resulting in arbitrary code execution.

This vulnerability poses a severe threat, as it allows for arbitrary code execution with a CVSS score of 8.8. A successful exploit could lead to full device compromise, theft of sensitive user data, and unauthorized control over the affected Apple hardware. The high severity underscores the urgency for all users and enterprises to update their devices immediately.

Immediate Action: Update all affected Apple devices to the latest available software versions (iOS/iPadOS 26.6 or the specified macOS versions) to apply the input validation improvements.

Proactive Monitoring: Monitor mobile device management (MDM) platforms for devices that have not yet installed the latest security updates.

Compensating Controls: Maintain enabled security features such as Lockdown Mode where applicable, and exercise caution when opening images from untrusted or unknown sources.

Public Exploit Available: No

The severity of this vulnerability necessitates immediate action across all organizational Apple device fleets. Administrators should enforce update policies to ensure that all devices are patched to the versions addressing the integer overflow flaw as quickly as possible.