An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, Pages 15.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory.
| Software | From | Fixed in |
|---|---|---|
| apple / pages | - | 15.1 |
| apple / ipados | - | 26.1 |
| apple / iphone_os | - | 26.1 |
| apple / macos | - | 26.1 |