The Patching Friars' AlmanacA calendar of CVE saints

Feast day May 17

RequiemHoly card for requiem, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 JXL † Requiem IMAGO MORTIS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Requiem, Funeral Song of the Decoder

Patron of image decoders, new formats nobody has hardened yet, and iPhones updated just in time.

Life

On 17 May 2026 a researcher described Requiem (CVE-2026-28956), a memory-corruption flaw in how Apple systems decoded JPEG XL images. A carefully crafted image could corrupt the device's memory, and Apple fixed it in iOS 26.5 and the related updates by improving input validation.

Prayer

O Saint Requiem, who sings your song when the decoder errs, let our images remain nothing but images. Amen.

How to celebrate

Celebrated by updating to iOS 26.5 and distrusting image formats that are too young.

New format, old bug.

Technical record

Disclosed on
May 17 2026
CVE
CVE-2026-28956
CVSS
6.5
Product
Apple · iOS and iPadOS

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

Sources: ret2p.lt

Canonized during the vacant see

Related saints

Sharing the feast day

Same product: iOS

Same year: 2026

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.