Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-43673: iOS and macOS Memory Corruption Risk from Malicious Audio Files

CVE-2026-43673 · published 3 months ago

Summary

A security issue in Apple's iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows hackers to corrupt system memory by sending a specially crafted audio file. This could potentially lead to system crashes or other issues. Apple has fixed this issue in the latest versions of these operating systems, so make sure to update your devices as soon as possible.

What to do

Update apple tvos to version 26.6 or later.
Update apple visionos to version 26.6 or later.
Update apple watchos to version 26.6 or later.
Update apple ipados to version 26.6 or later.
Update apple iphone_os to version 26.6 or later.

Affected software

Vendor	Product	Affected versions
apple	ios and ipados	< 26.6 < 18.7.10
apple	macos	< 14.8.8 >= 14.0, < 14.8.8 >= 15.0, < 15.7.8 >= 26.0, < 26.6
apple	tvos	< 26.6
apple	visionos	< 26.6
apple	watchos	< 26.6
apple	ipados	< 26.6 `cpe:2.3:o:apple:ipados::::::::`
apple	iphone_os	< 26.6 `cpe:2.3:o:apple:iphone_os::::::::`

Original advisory text

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted audio file may corrupt process memory.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published27 Jul 2026

Updated26 Oct 2026

First seen27 Jul 2026

Sources

CVE-2026-43673 · NVD

CVE-2026-43673 · MITRE

Track software like this

Free during beta