{"id":"CVE-2026-112417","kind":"vulnerability","aliases":["CVE-2026-112417"],"related":[],"title":"visionOS: integer overflow in 3D model processing corrupts memory","description":"An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.","summary":"An integer overflow in visionOS when it processes a maliciously crafted 3D model can corrupt memory. The sources do not say what an attacker gets beyond memory corruption.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-vision-pro","other","visionos"],"not_affected_if":["patched-visionos-27.2-or-later"],"how_to_check":null,"fix":"- Update visionOS to 27.2 or later, as stated in the source.","status":"open","published_at":"2026-10-26T21:17:31+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","triaged_at":"2026-10-26T21:31:50+00:00","updated_at":"2026-10-26T21:31:50+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-26T21:31:50Z","model":"claude-haiku-5-5","output":{"fix":"- Update visionOS to 27.2 or later, as stated in the source.","reach":"unknown","title":"visionOS: integer overflow in 3D model processing corrupts memory","impact":"medium","summary":"An integer overflow in visionOS when it processes a maliciously crafted 3D model can corrupt memory. The sources do not say what an attacker gets beyond memory corruption.","category":"other","nicknames":[],"who_cares":["visionos","apple-vision-pro"],"confidence":0.4,"needs_auth":"unknown","worst_case":"memory corruption from a crafted 3D model; code execution not confirmed","analyst_note":"Check Apple's security notes for CVE-2026-112417 to confirm the attack path, whether it leads to code execution, and the exact fixed build.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["patched-visionos-27.2-or-later"],"who_is_affected":"Apple Vision Pro devices running visionOS versions before 27.2 are affected when they process a crafted 3D model. The sources do not say which apps or sharing paths reach that processing. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000541,"input_tokens":3247,"output_tokens":432,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112417':12A,15A '-2026':11A,14A '27.2':65C '3d':5A,33B,70C 'address':54C 'appl':17B 'apple-vision-pro':16B 'attack':45B 'beyond':47B 'corrupt':8A,36B,49B,76C 'craft':32B,69C 'cve':10A,13A 'fix':62C 'get':46B 'improv':56C 'input':57C 'integ':2A,23B,51C 'issu':60C 'lead':73C 'malici':31B,68C 'may':72C 'memori':9A,37B,48B,75C 'model':6A,34B,71C 'overflow':3A,24B,52C 'pro':19B 'process':7A,29B,66C 'say':42B 'sourc':39B 'valid':58C 'vision':18B 'visiono':1A,21B,26B,64C","nicknames":[],"mitigations":[],"who_affected":"Apple Vision Pro devices running visionOS versions before 27.2 are affected when they process a crafted 3D model. The sources do not say which apps or sharing paths reach that processing. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112417","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112417","severity":null,"published_at":"2026-10-26T21:17:31+00:00","modified_at":"2026-10-26T21:17:31+00:00","first_seen_at":"2026-10-26T21:20:25+00:00","fetched_at":"2026-10-26T21:20:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}