{"id":"CVE-2026-112502","kind":"vulnerability","aliases":["CVE-2026-112502"],"related":[],"title":"Apple macOS: buffer overflow lets an app crash the system","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause a denial-of-service.","summary":"A buffer overflow in macOS was fixed with better bounds checking. An app running on the machine can trigger it to cause a denial of service.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["already-patched-version"],"how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions below\n- unknown","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe) or later","status":"open","published_at":"2026-10-26T21:17:41+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","triaged_at":"2026-10-26T21:29:43+00:00","updated_at":"2026-10-26T21:29:43+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:29:43Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe) or later","reach":"local","title":"Apple macOS: buffer overflow lets an app crash the system","impact":"low","summary":"A buffer overflow in macOS was fixed with better bounds checking. An app running on the machine can trigger it to cause a denial of service.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"An app crashes system components, causing denial of service.","analyst_note":"Check Apple's security notes for CVE-2026-112502 to confirm the affected component and whether a local app or remote input is needed.","how_to_check":"- Run `sw_vers -productVersion` and compare against the fixed versions below\n- unknown","needs_analyst":true,"not_affected_if":["already-patched-version"],"who_is_affected":"Macs running macOS Golden Gate before 27.2, Sequoia before 15.8.2, or Tahoe before 26.7.2. The sources describe a local app triggering a crash, so any Mac that runs untrusted apps is in scope; sources do not say more about configuration.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000566,"input_tokens":3279,"output_tokens":477,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112502':13A,16A '-2026':12A,15A '15.8.2':68C '26.7.2':71C '27.2':65C 'abl':76C 'address':52C 'app':7A,34B,73C 'appl':1A,18B 'apple-devic':17B 'better':30B 'bound':31B,55C 'buffer':3A,23B,49C 'caus':43B,78C 'check':32B,56C 'crash':8A 'cve':11A,14A 'denial':45B,81C 'denial-of-servic':80C 'devic':19B 'fix':28B,60C 'gate':64C 'golden':63C 'improv':54C 'infrastructur':20B 'issu':58C 'let':5A 'machin':38B 'maco':2A,21B,26B,62C,66C,69C 'may':74C 'overflow':4A,24B,50C 'run':35B 'sequoia':67C 'servic':47B,83C 'system':10A 'taho':70C 'trigger':40B","nicknames":[],"mitigations":[],"who_affected":"Macs running macOS Golden Gate before 27.2, Sequoia before 15.8.2, or Tahoe before 26.7.2. The sources describe a local app triggering a crash, so any Mac that runs untrusted apps is in scope; sources do not say more about configuration.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:41+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112502","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112502","severity":null,"published_at":"2026-10-26T21:17:41+00:00","modified_at":"2026-10-26T21:17:41+00:00","first_seen_at":"2026-10-26T21:20:26+00:00","fetched_at":"2026-10-26T21:20:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}