Apple Fixes Critical iOS Flaw That Could Put Crypto Wallets at Risk

Highlights:

• Apple released iOS 26.7.1 and iPadOS 26.7.1 to fix a serious flaw linked to targeted attacks.
• SlowMist warned crypto users that recent iOS exploitation activity may threaten sensitive wallet data on Apple devices.
• Users are urged to install updates and avoid suspicious links, files, and untrusted apps for better security.

Apple has released iOS 26.7.1 and iPadOS 26.7.1 to fix a serious CoreGraphics vulnerability that may have been used in highly targeted attacks. The flaw, tracked as CVE-2026-86950, can allow arbitrary code execution when a device processes a maliciously crafted file. Apple released the updates on September 28 and said it is aware of a report that the issue may have been exploited against specific individuals using iOS versions before iOS 27.

Blockchain security firm SlowMist raised a separate warning for crypto users on September 29. In its September 29 post on X, the company said the vulnerability is relevant to iOS attack activity it has been monitoring, including attempts aimed at sensitive crypto wallet data. SlowMist urged users to install the latest Apple security updates and be careful with suspicious files, links and app installation prompts.

🚨 Apple has released an important security update for iOS/iPadOS 26.7.1, addressing CVE-2026-86950, an out-of-bounds write vulnerability that may lead to arbitrary code execution.

As we previously reported, this update is highly relevant to the iOS attack activity we have been… pic.twitter.com/7WZ2TrYWHU

— SlowMist (@SlowMist_Team) September 29, 2026

Apple Fixes CoreGraphics Memory Flaw

According to Apple’s security advisory, CVE-2026-86950 is an out-of-bounds write issue in CoreGraphics. This type of memory flaw can allow software to write data outside the area it is supposed to use. In a successful attack, a specially prepared file could trigger code execution on the affected device.

Apple said it addressed the problem through improved bounds checking. The company credited Meta Product Security with reporting the vulnerability. Apple described the reported exploitation as an “extremely sophisticated attack” involving specific targeted individuals.

The iOS 26.7.1 and iPadOS 26.7.1 update is available for iPhone 11 and later. It also covers the iPad Pro 12.9-inch third generation and later, iPad Pro 11-inch first generation and later, iPad Air third generation and later, iPad eighth generation and later, and iPad mini fifth generation and later. Apple also released macOS Tahoe 26.7.1 on September 28. Its security notes list the same CVE and say the CoreGraphics flaw could lead to arbitrary code execution after processing a maliciously crafted file.

SlowMist Warns Crypto Users About Wallet Risks

SlowMist’s warning focuses on people who keep crypto wallets, exchange accounts or other sensitive financial information on Apple devices. The security firm said the update is particularly relevant because it has observed iOS exploitation activity targeting sensitive wallet data.

However, Apple’s advisory does not say CVE-2026-86950 specifically targeted cryptocurrency users. Apple only confirmed that it received a report of exploitation involving certain targeted individuals. SlowMist’s warning to crypto holders comes from its own security monitoring.

SlowMist urged users to update their iPhones, iPads, Macs, and other Apple devices to the latest security versions. It also warned users to avoid apps from unknown sources, stay away from suspicious links in Safari or in-app browsers, and be careful with unexpected files or app installation prompts.