ordinal0

mapping the labyrinths of software

I’m a security engineer, and this blog is where my research notes and personal projects live. Expect reverse engineering, binary analysis, and deep dives into the low end of the stack.

You can reach out to me via @ordinal0 or [email protected]

Projects

  • RavelbetaFirmware binary catalogue for Apple OS releases
    Ravel lets you explore the binaries shipped with Apple operating systems, covering the interfaces they expose, the libraries they link against, and the entitlements they hold. Compare any two releases to see what changed between builds.
    Browse binaries Compare builds Search
    A personal hobby project, not affiliated with Apple.

CVEs

Vulnerabilities reported to Apple Product Security, credited in Apple's security advisories.

  1. CVE-2026-86990
    CoreMediaaccess issue

    A malicious app may be able to access the camera without user permission.

    Fixed in iOS 27.2 and iPadOS 27.2 · iOS 26.7.2 and iPadOS 26.7.2 · iOS 18.7.11 and iPadOS 18.7.11 · macOS Golden Gate 27.2 · macOS Tahoe 26.7.2 · visionOS 27.2

  2. CVE-2026-112678
    Calendarpermissions issuecollision

    An app may be able to access sensitive user data.

    Fixed in iOS 27.2 and iPadOS 27.2 · iOS 26.7.2 and iPadOS 26.7.2 · macOS Golden Gate 27.2 · macOS Tahoe 26.7.2 · macOS Sequoia 15.8.2 · visionOS 27.2 · watchOS 27.2

  3. CVE-2026-112616
    Screen Timeauthorization issuecollision

    An app may be able to access sensitive user data.

    Fixed in iOS 27.2 and iPadOS 27.2 · macOS Golden Gate 27.2 · visionOS 27.2

  4. CVE-2026-86925
    Quick Lookauthorization issuecollision

    An app may be able to access sensitive user data.

    Fixed in iOS 27.2 and iPadOS 27.2 · macOS Golden Gate 27.2 · visionOS 27.2

  5. CVE-2026-84575
    CoreUIout-of-bounds write

    Processing a maliciously crafted file may lead to unexpected app termination.

    Fixed in iOS 27 and iPadOS 27 · macOS Golden Gate 27 · macOS Tahoe 26.7 · macOS Sequoia 15.8 · tvOS 27 · visionOS 27 · watchOS 27

  6. CVE-2026-65398
    IOMobileFrameBufferout-of-bounds accesscollision

    An app may be able to cause unexpected system termination or corrupt kernel memory.

    Fixed in iOS 27 and iPadOS 27 · macOS Golden Gate 27 · tvOS 27 · visionOS 27 · watchOS 27

  7. CVE-2026-65339
    Audiologic issuecollision

    An app may be able to leak sensitive user information.

    Fixed in iOS 26.6.1 and iPadOS 26.6.1 · macOS Tahoe 26.6.2

    Also fixed in macOS Sequoia 15.8 · tvOS 27 · visionOS 27 · watchOS 27

    Also fixed in iOS 18.7.11 and iPadOS 18.7.11

  8. CVE-2026-20679
    CoreUI

    Processing a maliciously crafted file may lead to unexpected app termination.

    Fixed in macOS Tahoe 26.4 · macOS Sequoia 15.7.5 · macOS Sonoma 14.8.5

Additional recognition, no CVE assigned — CoreUI, 11 May 2026: iOS 26.5 and iPadOS 26.5 · macOS Tahoe 26.5 · tvOS 26.5 · visionOS 26.5 · watchOS 26.5

Recent posts