Apple Patches Critical iOS CoreGraphics Flaw Amid Security Concerns

The vulnerability, reported by Meta Product Security, stems from an out-of-bounds write issue within the CoreGraphics framework. By processing a maliciously crafted file, an attacker could potentially corrupt memory to run unauthorized code. Apple addressed the flaw in iOS 26.7.1 and iPadOS 26.7.1 by implementing improved bounds checking. The patch also extends to macOS Sequoia 15.8.1 and macOS Tahoe 26.7.1.

Blockchain security firm SlowMist highlighted the update as a priority for cryptocurrency users, citing a growing trend of iOS exploits designed to intercept sensitive wallet data. Although the firm has tracked recent campaigns like FomoPeek and the Darksword framework capable of compromising private keys and seed phrases, there is currently no technical evidence linking CVE-2026-86950 to these specific incidents. Apple has not disclosed details regarding the nature of the targeted attacks, the identities of victims, or the specific files used in the exploit chain.

Users on the iOS 26 branch, specifically those with iPhone 11 or newer and supported iPad models, are urged to apply the update immediately. Security experts emphasize that while software patches prevent future unauthorized access, they cannot recover funds or credentials if a device was previously compromised. In cases of suspected exposure, the standard recommendation remains to generate new wallet credentials on a clean device and migrate assets.