CVE-2026-86874

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.

Score

CVSS 3.1 3.3 Low

Status

Awaiting Analysis - product-security@apple.com

Published

2026-10-20

Last modified

2026-10-20

Weaknesses

CWE-125

Affected products

• Xcode (Apple)

References

• https://support.apple.com/en-us/149040