CyberSecurity News

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

The Hacker News

· October 1, 2026

AI summary

A proof-of-concept has been published for a vulnerability in Apple's CoreGraphics, identified as CVE-2026-86950, which may have been exploited in targeted attacks. The flaw can be triggered by a malicious PDF containing a specially crafted embedded font, causing a crash in unpatched iPhones and Macs. The published code results in a crash rather than executing arbitrary code. The vulnerability is related to memory corruption, and researchers are working to develop a functional exploit.

Vulnerabilities mentioned

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

Read the full article at The Hacker Newsthehackernews.com/2026/10/apple-coregraphics-poc-emerges-as.html

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.