Live › vulnerability › CVE-2026-112464
Go to dashboardAn out-of-bounds write in an Apple operating system component lets a maliciously crafted file corrupt heap memory. The sources do not say which component or what code execution an attacker could reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Devices running the Apple operating systems listed in the sources before the fixed versions. The sources do not say which file types or apps trigger the flaw, so unknown whether a specific configuration is needed. Teams that manage Apple devices should update them, and the sources do not indicate who can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted file may lead to heap corruption.
This page as .md · .json · in your agent: get_signal("CVE-2026-112464")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.