An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, Pages 15.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory.
History

Wed, 28 Jan 2026 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-125
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 28 Jan 2026 17:45:00 +0000

Type Values Removed Values Added
Description An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, Pages 15.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-01-28T19:19:57.133Z

Reserved: 2025-04-22T21:13:49.961Z

Link: CVE-2025-46316

cve-icon Vulnrichment

Updated: 2026-01-28T19:19:20.350Z

cve-icon NVD

Status : Received

Published: 2026-01-28T18:16:49.350

Modified: 2026-01-28T20:16:08.937

Link: CVE-2025-46316

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.