Live › vulnerability › CVE-2026-112540
Go to dashboardAn integer overflow in macOS input handling can be triggered by processing a maliciously crafted file. The source says the result is unexpected app termination, which is a crash rather than code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Mac machines running the macOS versions before the listed fixes. The sources do not say which app or file format is involved, so teams cannot narrow it further from this text. unknown for managed fleets that already auto-update.
No product ranges from the sources yet.
sw_vers27.2 (Golden Gate), 15.8.2 (Sequoia) or 26.7.2 (Tahoe), per the advisoryEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.
This page as .md · .json · in your agent: get_signal("CVE-2026-112540")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.