5.5
Medium
CVE-2026-28890 An out-of-bounds read was addressed with improved bounds checking
Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xcode 26.4 | earliest → < 26.4 | 26.4 |
References
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of Xcode
The 50 CVEs of Xcode →
CVE-2026-112605
This issue was addressed with improved handling of symlinks
3.3
Low
CVE-2026-112602
An authorization issue was addressed with improved state management
3.3
Low
CVE-2026-86948
This issue was addressed by enforcing library validation on the affected binaries
7.8
High
CVE-2026-86949
This issue was addressed by enforcing library validation on the affected binaries
8.8
High