484 matches found
CVE-2014-4377
CydiaSubstrate-based fix for CVE-2014-4377 See github.com/feliam/cve-2014-4377 and http://blog.binamuse.com/2014/09/coregraphics-memory-corruption.html...
CVE-2014-4377
CoreGraphics Memory Corruption - CVE-2014-4377 Apple CoreGraphics library fails to validate the input when parsing the colorspace specification of a PDF XObject resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input in any...
CVE-2014-4481
CoreGraphics CCITT Memory Corruption - CVE-2014-4481 Apple CoreGraphics framework fails to validate the input when parsing CCITT group 3 encoded data resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input resulting in arbitrary...
CVE-2014-4378
CoreGraphics Information Disclosure - CVE-2014-4378 This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fail...
CVE-2026-86950
🛡️ CVE-2026-86950 — CoreGraphics Security Research 🔬 Defensive Security Research • Vulnerability Analysis • Detection 📌 Overview CVE-2026-86950 is a high-severity vulnerability affecting Apple's CoreGraphics component. The vulnerability is classified as an out-of-bounds write CWE-787 and can...
Apple CoreGraphics Out-Of-Bounds Write
Apple CoreGraphics contains an out-of-bounds write fixed in iOS and iPadOS 26.7.1, macOS Sequoia 15.8.1, and macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution...
Exploit for Out-of-bounds Write in Apple Ipados
🛡️ CVE-2026-86950 — CoreGraphics Security Research...
Vulnerability hidden in Apple CoreGraphics
Apple has identified a vulnerability in CoreGraphics on iOS, iPadOS, and macOS. This vulnerability involves an out-of-bounds write operation within the CoreGraphics component. An attacker can exploit this vulnerability by processing specially crafted files, which may lead to the execution of...
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
Security researchers have published the first public proof-of-concept for CVE-2026-86950 , an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs...
The vulnerability of the Apple CoreGraphics system framework in operating systems such as iOS, MacOS, and iPadOS allows attackers to execute arbitrary code.
The vulnerability of the Apple CoreGraphics system framework in iOS, MacOS, and iPadOS relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution...
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950 , refers to an out-of-bounds write impacting the CoreGraphics component that could lead...
CVE-2026-86950
creationtimestamp| type| source ---|---|--- 2026-09-28 17:18:01+00:00| seen| https://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.html 2026-09-28 19:11:35+00:00| seen| https://infosec.exchange/users/applsec/statuses/117350248943713236 2026-09-28 19:11:37+00:00| seen|...
VulnCheck KEV: CVE-2026-86950
Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution...
PT-2026-102337
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7.1 iPadOS versions prior to 26.7.1 macOS Sequoia versions prior to 15.8.1 macOS Tahoe versions prior to 26.7.1 Description An out-of-bounds write issue exists in the Apple CoreGraphics framework, which is used across...
About the security content of macOS Tahoe 26.7.1
About the security content of macOS Tahoe 26.7.1 This document describes the security content of macOS Tahoe 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
About the security content of macOS Sequoia 15.8.1
About the security content of macOS Sequoia 15.8.1 This document describes the security content of macOS Sequoia 15.8.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of iOS 26.7.1 and iPadOS 26.7.1
About the security content of iOS 26.7.1 and iPadOS 26.7.1 This document describes the security content of iOS 26.7.1 and iPadOS 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
MiracleLinux 4 : freetype-2.3.11-6.AXS4.8 (AXSA:2012-24:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-24:01 advisory. The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments...
