3.3
Low
CVE-2026-86874 An out-of-bounds read was addressed with improved input validation
Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xcode 27 | earliest → < 27 | 27 |
References
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of Xcode
The 50 CVEs of Xcode →
CVE-2026-112605
This issue was addressed with improved handling of symlinks
3.3
Low
CVE-2026-112602
An authorization issue was addressed with improved state management
3.3
Low
CVE-2026-86948
This issue was addressed by enforcing library validation on the affected binaries
7.8
High
CVE-2026-86949
This issue was addressed by enforcing library validation on the affected binaries
8.8
High