Apple Patches Critical CoreGraphics Zero-Day CVE-2023-32434 in Older iPhones

Key Takeaways

• Apple has issued urgent security updates for older iPhone and iPad models.
• The patch addresses CVE-2026-86950, a critical zero-day vulnerability in CoreGraphics, which may have been actively exploited.
• Affected devices include the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad.
• The vulnerability could allow attackers to execute arbitrary code through specially crafted files.
• Users of these older devices are strongly advised to update immediately to iOS 18.7.11 and iPadOS 18.7.11.

Apple has rolled out crucial security updates for a range of its older devices, addressing a zero-day vulnerability in its CoreGraphics component that security researchers believe may have already been leveraged in targeted attacks. The updates, released on October 26, 2026, bring older iPhones and iPads to iOS 18.7.11 and iPadOS 18.7.11, providing vital protection against potential exploits.

Critical CoreGraphics Zero-Day Addressed

The primary concern in this latest release is CVE-2026-86950, a flaw within CoreGraphics, the system component responsible for handling graphics and document rendering on Apple devices. This particular vulnerability is an out-of-bounds write error, a type of memory corruption bug where an application attempts to write data beyond the allocated memory buffer. If successfully exploited, this could allow an attacker to execute arbitrary code on a device simply by processing a maliciously crafted file.

Apple acknowledged the potential severity of the issue, stating it is “aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals” running iOS versions prior to iOS 27. The company credited Meta Product Security for reporting the vulnerability, highlighting the collaborative effort in identifying such critical flaws.

Broader Protection for Legacy Devices

This isn’t the first time Apple has addressed this specific CoreGraphics zero-day. Earlier in September, Apple released iOS 26.7.1 and iPadOS 26.7.1 to patch the same CVE for its newer generation devices. The current release extends this critical protection to a wider array of older hardware, ensuring that devices no longer receiving major iOS upgrades still benefit from essential security fixes. Affected models include the iPhone XS, iPhone XS Max, iPhone XR, and the seventh-generation iPad.

While Apple’s advisory points to targeted exploitation, it refrains from disclosing specifics regarding the attackers, the identities of victims, or the delivery mechanism of the malicious files. Crucially, the advisory does not specify whether user interaction was required for exploitation, leaving open questions about the possibility of zero-click attacks or broader campaigns against general users.

Additional Vulnerabilities Patched

Beyond the CoreGraphics zero-day, the iOS 18.7.11 and iPadOS 18.7.11 updates also address two other significant vulnerabilities:

• CVE-2026-65339 (Audio Component): This logic flaw in the Audio component could allow a malicious application to leak sensitive user information. Apple has implemented improved checks to mitigate this risk, crediting Mustafa Calap (@ordinal0 of dbg.re) and Nik Tsytsarkin of Meta Red Team X for their discovery.
• CVE-2026-86990 (CoreMedia): A vulnerability in CoreMedia could enable a malicious application to access the device’s camera without explicit user permission. Apple has tightened access restrictions to resolve this issue, also crediting Mustafa Calap.

Unlike the CoreGraphics vulnerability, Apple’s advisories for these two issues do not include warnings about active exploitation.

What You Should Do

Apple’s consistent patching of exploited vulnerabilities on older devices, such as the past iOS 12.5.7 update for a WebKit flaw, underscores the importance of maintaining up-to-date software, even for hardware that has reached end-of-life for major OS upgrades.

• Update Immediately: All users of affected devices (iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad) should install iOS 18.7.11 or iPadOS 18.7.11 without delay. Navigate to Settings > General > Software Update on your device.
• Prepare for Update: Before initiating the update, Apple recommends backing up your device, connecting it to a power source, and ensuring you are connected to Wi-Fi.
• Verify Installation: After the update, confirm that the correct version has been installed. Refer to Apple’s update instructions for detailed guidance.
• Stay Vigilant: While patching addresses the disclosed flaws, it does not confirm whether a device was previously compromised. Users should remain vigilant against suspicious files or links.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.