CVE-2026-20616: 
macOS vulnerability analysis and mitigation

CVE-2026-20616 is an out-of-bounds write vulnerability in Apple's Model I/O framework (specifically the libusd_ms Alembic file parser) that can be triggered by processing a maliciously crafted USD (Universal Scene Description) file, potentially leading to unexpected app termination or remote code execution. It affects iOS and iPadOS prior to 18.7.5, macOS Sonoma prior to 14.8.4, macOS Tahoe prior to 26.3, and visionOS prior to 26.3. The vulnerability was reported to Apple on November 19, 2025, and patches were released on February 11, 2026, with the ZDI advisory published March 10, 2026. It carries a CVSS v3.1 base score of 8.8 (High) per Feedly/NVD, and 7.8 (High) per ZDI's local-vector scoring (Apple iOS Advisory, Apple macOS Sonoma Advisory, ZDI Advisory).

The vulnerability is classified as CWE-787 (Out-of-bounds Write) and resides in the Alembic file parsing logic within Apple's libusd_ms library, part of the Model I/O framework. Insufficient validation of user-supplied data during Alembic file parsing allows a write operation to occur past the end of an allocated data structure. An attacker exploits this by crafting a malicious USD/Alembic file and delivering it to a target user; when the file is opened or processed by any application using Model I/O (e.g., Preview, AR Quick Look, or third-party apps), the out-of-bounds write is triggered. The attack requires user interaction — the target must open or process the malicious file — but no special privileges are needed (ZDI Advisory, Apple macOS Tahoe Advisory).

Successful exploitation can allow a remote attacker to execute arbitrary code in the context of the current process, with high confidentiality, integrity, and availability impacts. At minimum, processing a malicious USD file causes unexpected application termination (denial of service); in a more severe scenario, the out-of-bounds write can be leveraged for full code execution under the privileges of the affected application. The vulnerability affects a broad range of Apple devices across iOS, iPadOS, macOS Sonoma, macOS Tahoe, and visionOS, making the potential attack surface significant (ZDI Advisory, Apple iOS Advisory, Apple macOS Sonoma Advisory).

1. Craft a malicious USD/Alembic file: Using knowledge of the Alembic file format and the out-of-bounds write flaw in libusd_ms, craft a USD file with malformed Alembic data that triggers a write past the end of an allocated buffer during parsing.
2. Deliver the file to the target: Distribute the malicious .usd or .abc file via email attachment, web download, AirDrop, iMessage, or any other file-sharing mechanism that would cause the target to receive and open the file on a vulnerable Apple device.
3. Trigger file processing: Induce the target user to open the file — this can occur through Preview, AR Quick Look, Finder thumbnailing, or any third-party application that uses Apple's Model I/O framework for USD/Alembic parsing.
4. Achieve code execution: The out-of-bounds write corrupts adjacent memory structures; with appropriate heap shaping, an attacker can redirect execution flow to attacker-controlled code running in the context of the processing application (ZDI Advisory, Apple iOS Advisory).

• File System: Presence of unexpected or unsolicited .usd, .usda, .usdc, .usdz, or .abc (Alembic) files in Downloads, Temp, or Mail attachment directories; files with mismatched extensions or unusual metadata.
• Logs: Application crash logs (in /Library/Logs/DiagnosticReports/ or ~/Library/Logs/DiagnosticReports/) referencing Model I/O, libusd_ms, or Alembic parsing with out-of-bounds memory access signals (e.g., EXC_BAD_ACCESS, SIGSEGV, SIGBUS).
• Process: Unexpected crashes of Preview, AR Quick Look, or other Model I/O-consuming applications immediately after opening a USD/Alembic file; unusual child processes spawned from these applications.
• Network: Outbound connections from Preview or similar apps to unknown external hosts following the opening of a USD file, which may indicate post-exploitation activity.

Apple has released patches addressing this vulnerability across all affected platforms: update to iOS 18.7.5, iPadOS 18.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3, or visionOS 26.3 or later. No configuration-based workaround is available; updating to a patched version is the only remediation. As an interim measure, organizations should restrict users from opening USD or Alembic files from untrusted sources and monitor for unexpected application crashes related to 3D file processing (Apple iOS Advisory, Apple macOS Sonoma Advisory, Apple macOS Tahoe Advisory, Apple visionOS Advisory).

The vulnerability was discovered and reported by Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative, who also published the coordinated ZDI advisory (ZDI-26-176) on March 10, 2026. The SANS Internet Storm Center noted the February 2026 Apple security updates in their diary. Security aggregators including VulDB, CCN-CERT, and BeyondMachines covered the broader February 2026 Apple patch batch, which included this CVE among over 90 vulnerabilities addressed across Apple platforms (ZDI Advisory).