Researchers release crash demonstration for patched Apple PDF flaw
Image: Primary Security researchers at Calif published a public proof of concept on September 30 for CVE-2026-86950, an Apple CoreGraphics flaw that Apple says may have been used against targeted individuals. A PDF containing a crafted font crashes unpatched systems; the researchers report effects on iPhones and Macs.
The flaw causes Apple's graphics framework to allocate a buffer too small for a glyph and write outside it. Calif released generation scripts and a sample PDF, but did not demonstrate code execution or a WhatsApp delivery path.
Apple patched the flaw on September 28. CISA added it to its Known Exploited Vulnerabilities catalog the following day, requiring federal agencies to apply the fix by October 2.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
