Summary
CVE-2026-65346 is an integer-overflow flaw in ImageIO reported by Meta Red Team X and affecting Apple operating systems. Apple’s update also addressed multiple WebKit issues and a Telephony flaw that could allow network-traffic interception from a privileged network position.
Why it matters
Image parsers remain high-value targets because browsers, messaging clients and operating systems process untrusted media automatically.
Related coverage
- Apple resets EU app economics for web and alternative-store distribution
- ValidateHTML finds pervasive markup and accessibility failures across top domains
- Researchers show how Copilot can be induced to expose connected data