ZDI-26-174
HIGH 7.8
Published
Mar 10, 2026
Apple macOS ImageIO SGI File Parsing Integer Overflow Remote Code Execution Vulnerability
Apple
CVE-2026-20675 is a high-severity remote code execution vulnerability in Apple's macOS ImageIO library that allows attackers to execute arbitrary code on affected systems without requiring local access. An attacker can exploit this vulnerability through various attack vectors involving the ImageIO library to gain complete control over vulnerable machines. Security teams should prioritize patching affected macOS installations immediately, restrict access to ImageIO-dependent applications, and monitor for exploitation attempts targeting this vulnerability.