{
  "id": 1733018,
  "title": "Apple plugs image-processing hole ripe for spyware abuse",
  "url": "https://urgent.news/2026/08/18/apple-plugs-image-processing-hole-ripe-for-spyware-abuse-1733018",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-18T14:56:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/08/18/apple-plugs-image-processing-hole-ripe-for-spyware-abuse/5289031"
  },
  "original_language": "en",
  "account": "Apple has released a series of patches for its devices, including smartphones, tablets, and computers, addressing a critical image-processing vulnerability. The flaw, known as CVE-2026-65346, is an integer-overflow bug in Apple's ImageIO framework, which is responsible for parsing image files. This vulnerability can be exploited to execute arbitrary code, allowing attackers to gain unauthorized access to a device. The affected systems include macOS Tahoe, iPhone 11 and later models, and various iPad Pro, iPad Air, iPad, and iPad mini models. Apple addressed the issue by improving input validation, and experts recommend users install the August 17 updates as soon as possible. The security flaw has raised concerns about its potential use in spyware attacks, particularly zero-click exploits that target high-value individuals. Such attacks have been executed through malicious files delivered via messaging services, with notable examples like Operation Triangulation and FORCEDENTRY. While Apple has not confirmed any specific spyware campaigns using this particular vulnerability, the risk remains significant. Most other vulnerabilities in the iOS 26.6.1 update pertain to WebKit, Apple's widely used web browser framework.",
  "summary": "Patch batch spans current kit, older iGadgets, Macs, and Vision Pro",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register",
        "title": "Apple plugs image-processing hole ripe for spyware abuse",
        "url": "https://urgent.news/2026/08/18/apple-plugs-image-processing-hole-ripe-for-spyware-abuse",
        "published": "2026-08-18T14:56:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}