Security researcher earns Apple bounty for ImageIO out-of-bounds write bug CVE-2026-64750
wunderwuzzi23 · x · 2026-11-13
Security researcher Johann Rehberger (wunderwuzzi) reports receiving an Apple bounty for CVE-2026-64750, an ImageIO flaw where processing a maliciously crafted image could cause memory corruption via an out-of-bounds write, fixed with improved bounds checking.
More from Safety
- Fake NFT game beta lures devs into running malicious AppleScript installer — QuixiAI · 2026-11-13
- Anthropic says it hit its AI-accelerated-research threshold days before IPO — winer666 · 2026-11-13
- Passive scan of 21,130 MCP servers finds 55.7% answer without any login — Bek003 · 2026-11-13
- After seeing AI voice scams, author declares person-to-person calls dead — alexcovo_eth · 2026-11-13
- AI safety grantmaking scalability questioned; evaluator asks for better ideas — NathanpmYoung · 2026-11-13
- Anthropic denies reported oversight plan, promises details on human control soon — deanwball · 2026-11-13