Live › vulnerability › CVE-2026-112471
Go to dashboardA buffer overflow in macOS image processing can be triggered by a maliciously crafted image. The sources say it leads to unexpected process termination, and do not describe code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
macOS machines that have not yet installed the listed fixed releases and that open untrusted images. The sources do not say which image handling components are involved, so whether a given app is exposed is unknown.
No product ranges from the sources yet.
sw_vers and compare against the fixed builds listed in the sources.27.2 (Golden Gate), 15.8.2 (Sequoia), or 26.7.2 (Tahoe), as named in the advisory text.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination.
This page as .md · .json · in your agent: get_signal("CVE-2026-112471")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.