Live › vulnerability › CVE-2026-112485
Go to dashboardProcessing a maliciously crafted 3D model can corrupt memory in Apple's operating systems. The sources do not say what an attacker gets beyond memory corruption, such as code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Apple device running the affected OS versions that processes 3D model files is in scope, since the flaw is in parsing those files. The sources do not say which apps or import paths trigger it, so teams should assume any device that opens 3D models is exposed until patched. Devices already on the fixed versions are not affected.
No product ranges from the sources yet.
27.2.27.2, macOS Sequoia to 15.8.2, and macOS Tahoe to 26.7.2.27.2.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
This page as .md · .json · in your agent: get_signal("CVE-2026-112485")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.