EUVD-2026-78011
GHSA-6v6p-c22m-m3wr
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver crafted 3D model to victim
-
DeliveryDevice parses malicious model file
-
ExploitTrigger out-of-bounds write in parser
-
ExecutionCorrupt process memory
-
ImpactExecute attacker-controlled code
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, write limits
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the target Apple device to process a maliciously crafted 3D model file, so the attacker must first deliver that file to the victim (message, email, web download, AirDrop, or a shared document) and have it parsed by the vulnerable 3D-asset handling code. It affects default configurations of unpatched iOS/iPadOS below 26.7/27, macOS below 15.8/26.7/27, and tvOS/visionOS/watchOS below 27 - no special feature toggle is needed. The practical limiting factor is that this is a local file-processing vector (AV:L), not a remote service: the attacker cannot trigger it purely over the network without getting the file onto and processed by the device, and if processing depends on the user opening the model, that user step further limits exploitation. |
| Impact | This is a genuine but not urgent priority. The CVSS 8.4 rests on an out-of-bounds write (CWE-787) with full C:H/I:H/A:H impact, but the vector is explicitly AV:L (local), meaning the malicious 3D model must reach and be processed on the target device - this is a client-side file-parsing bug, not a remotely reachable network service. EPSS is very low (0.17%, 7th percentile), there is no CISA KEV listing, and no public exploit code was identified, so all three exploitation signals agree that widespread automated exploitation is not expected. The main tension is between the high impact metrics and the low practical reachability: memory corruption in a 3D-model parser is a well-established route to code execution on Apple platforms, but it requires convincing a victim to open/receive a crafted asset. Apple scored UI:N, yet 'processing a maliciously crafted 3D model' typically implies either automatic preview/thumbnail generation (justifying UI:N) or a user opening the file (which would be UI:R) - verify the exact trigger surface with Apple, as it materially changes exposure. Net: treat as a standard high-severity client patch, not an emergency. |
| Exploit ScenarioDerived | An attacker crafts a malicious 3D model file (e.g. a USD/SceneKit-compatible asset) and delivers it via email, message, website, or AirDrop. When the victim's Apple device parses or previews the model, the out-of-bounds write corrupts memory, potentially leading to arbitrary code execution in the parsing process. No public proof-of-concept exists at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 16, 2026
An out-of-bounds write in Apple's 3D model handling code causes memory corruption on unpatched iPhones, iPads, Macs, Apple TVs, Apple Vision Pro and Apple Watches when a maliciously crafted 3D model file is processed by the device. The flaw carries a CVSS 3.1 base score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and was addressed by Apple with improved bounds checking in iOS/iPadOS 26.7 and 27, macOS Sequoia 15.8, macOS Tahoe 26.7 and macOS Golden Gate 27, plus tvOS 27, visionOS 27 and watchOS 27; no public exploit code has been identified at time of analysis, and EPSS places the likelihood of exploitation in the near term at only 0.17% (7th percentile). Exploitation is not remote-service based: the attacker must first deliver the crafted model to the victim's device and have it parsed, so it is best treated as a genuine but not urgent patching priority rather than an imminent threat.
RemediationAI
Vendor-released patches are available: update iOS and iPadOS to 26.7 or 27, macOS Sequoia to 15.8, macOS Tahoe to 26.7, macOS Golden Gate to 27, and tvOS, visionOS and watchOS to 27. Because the same 3D-parsing code is shared, every affected device family must be updated - patching only iPhone/iPad leaves Macs, Apple TV, Vision Pro and Watch exposed to the same file-based trigger. Per-platform instructions are in the Apple advisories at https://support.apple.com/en-us/149034 through /149043. Where immediate updating is not possible, the effective compensating controls target the delivery step rather than the parser: restrict or block handling of untrusted 3D model files (.usdz/.usd/.obj and similar asset formats) from email, messaging, web downloads, AirDrop and shared documents, and disable or sandbox any application or workflow that automatically parses model assets from untrusted sources - the trade-off is reduced productivity for legitimate 3D design workflows and possible breakage of preview/thumbnail generation. Gatekeeper, Notarization, XProtect and Lockdown Mode on macOS/iOS add further friction against untrusted file execution, but none of these substitutes for the vendor update and none should be relied on as a complete fix given the high integrity and confidentiality impact (C:H/I:H/A:H) if the bug is reached.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 5 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is an out-of-bounds write (CWE-787) in the component that parses and renders 3D model assets across Apple's operating systems. CWE-787 describes a class of defect where a program writes data past the end of an allocated buffer because an index or length is not validated against the buffer's bounds; on modern platforms with hardening, this typically manifests as memory corruption that can be steered toward code execution or an immediate crash, depending on heap layout and how the overwritten data is subsequently used. Apple's advisory states the issue was fixed by adding improved bounds checking, indicating the parser previously trusted size or offset fields inside the crafted model file. The CPE data ties the defect to five Apple platform families - cpe:2.3:a:apple:ios_and_ipados, cpe:2.3:a:apple:macos, cpe:2.3:a:apple:tvos, cpe:2.3:a:apple:visionos and cpe:2.3:a:apple:watchos - confirming this is shared 3D-asset parsing code shipped across the entire device ecosystem rather than an isolated product. Because the CVSS vector is AV:L with PR:N and UI:N, the attack is local in nature (the file must be present on and processed by the device) but requires no prior authentication once that precondition is met; the assessment notes the practical limit is the file-delivery and parsing step, not any privilege or feature toggle.
Know when macOS gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Agree with Apple: local file-parse vector (AV:L), no privileges needed to process an attacker-supplied model, and an OOB write plausibly yields code execution (C/I/A:H); UI:N assumes automatic parsing - would drop to UI:R if user must open the file.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
4DescriptionCVE.org
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.
Executive ViewAI
Apple's 3D model handling code contains a high-severity memory corruption vulnerability (CVE-2026-84546) that can affect iPhones, iPads, Macs, Apple TVs, Apple Vision Pro, and Apple Watches if a crafted model file is delivered and parsed. Successful exploitation by an unauthenticated local attacker could lead to high confidentiality, integrity, and availability impact on the affected device, but no public exploit identified at time of analysis and EPSS is 0.2%, so this is a genuine patching priority rather than an imminent threat. Leadership should ensure Apple device fleets are updated promptly, particularly for employees who handle untrusted 3D model files.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS remote control utility develope
Out-of-bounds write in Apple's iOS, iPadOS, and macOS file-parsing code lets remote attackers achieve arbitrary code exe
Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
A logic issue was addressed with improved restrictions. Rated high severity (CVSS 7.8), this vulnerability is no authent
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
A race condition was addressed with additional validation. Rated high severity (CVSS 7.0), this vulnerability is no auth
This issue was addressed with improved checks. Rated critical severity (CVSS 10.0), this vulnerability is remotely explo
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from
Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This i
A vulnerability was found in LibTIFF. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no aut
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. Rated high severity (CVSS 8.8), this
Exploit-DB