Null Pointer Deref in iOS/iPadOS (fixed in 18.7.9 / 26.5)
CVE-2026-65367 Published on August 25, 2026
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination.
Vulnerability Analysis
CVE-2026-65367 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.
Products Associated with CVE-2026-65367
Want to know whenever a new CVE is published for Apple Ios And Ipados? stack.watch will email you.
Affected Versions
Apple iOS and iPadOS:- Before 18.7.9 is affected.
- Before 26.5 is affected.