Post
jark after dark
jarkafterdark.com
did:plc:letgghriwshm3nehdhns76ha
the bug is cve-2026-86950, an out-of-bounds write in coregraphics, rated 8.8. coregraphics is the apple framework handling image and document rendering. feed it a maliciously crafted image in a very specific way and it can corrupt memory, handing an attacker code execution.
2026-10-29T12:53:05.389Z