{"id":"CVE-2026-112471","kind":"vulnerability","aliases":["CVE-2026-112471"],"related":[],"title":"macOS image processing buffer overflow causes process crash","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected process termination.","summary":"A buffer overflow in macOS image processing can be triggered by a maliciously crafted image. The sources say it leads to unexpected process termination, and do not describe code execution.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","macos"],"not_affected_if":["updated-to-fixed-release"],"how_to_check":"- Check the macOS version with `sw_vers` and compare against the fixed builds listed in the sources.","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe), as named in the advisory text.","status":"open","published_at":"2026-10-26T21:17:37+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","triaged_at":"2026-10-26T21:30:10+00:00","updated_at":"2026-10-26T21:30:10+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:30:10Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia), or `26.7.2` (Tahoe), as named in the advisory text.","reach":"local","title":"macOS image processing buffer overflow causes process crash","impact":"low","summary":"A buffer overflow in macOS image processing can be triggered by a maliciously crafted image. The sources say it leads to unexpected process termination, and do not describe code execution.","category":"infrastructure","nicknames":[],"who_cares":["macos"],"confidence":0.5,"needs_auth":"no","worst_case":"Processes crash when a crafted image is opened; code execution is not stated","analyst_note":"Check the Apple security notes at the NVD link for the affected components and whether any code execution is possible.","how_to_check":"- Check the macOS version with `sw_vers` and compare against the fixed builds listed in the sources.","needs_analyst":true,"not_affected_if":["updated-to-fixed-release"],"who_is_affected":"macOS machines that have not yet installed the listed fixed releases and that open untrusted images. The sources do not say which image handling components are involved, so whether a given app is exposed is unknown.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000553,"input_tokens":3287,"output_tokens":449,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112471':11A,14A '-2026':10A,13A '15.8.2':67C '26.7.2':70C '27.2':64C 'address':51C 'bound':54C 'buffer':4A,18B,48C 'caus':6A 'check':55C 'code':45B 'craft':30B,74C 'crash':8A 'cve':9A,12A 'describ':44B 'execut':46B 'fix':59C 'gate':63C 'golden':62C 'imag':2A,22B,31B,75C 'improv':53C 'infrastructur':15B 'issu':57C 'lead':36B,77C 'maco':1A,16B,21B,61C,65C,68C 'malici':29B,73C 'may':76C 'overflow':5A,19B,49C 'process':3A,7A,23B,39B,71C,80C 'say':34B 'sequoia':66C 'sourc':33B 'taho':69C 'termin':40B,81C 'trigger':26B 'unexpect':38B,79C","nicknames":[],"mitigations":[],"who_affected":"macOS machines that have not yet installed the listed fixed releases and that open untrusted images. The sources do not say which image handling components are involved, so whether a given app is exposed is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:37+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112471","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112471","severity":null,"published_at":"2026-10-26T21:17:37+00:00","modified_at":"2026-10-26T21:17:37+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","fetched_at":"2026-10-26T21:20:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}