{"id":"CVE-2026-112540","kind":"vulnerability","aliases":["CVE-2026-112540"],"related":[],"title":"macOS: integer overflow in file parsing crashes apps when opening crafted files","description":"An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.","summary":"An integer overflow in macOS input handling can be triggered by processing a maliciously crafted file. The source says the result is unexpected app termination, which is a crash rather than code execution.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["mac-fleet","macos","other"],"not_affected_if":["already-patched-macos"],"how_to_check":"- Check the macOS version with `sw_vers`\n- unknown","fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), per the advisory\n- unknown","status":"open","published_at":"2026-10-26T21:17:46+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:28:08+00:00","updated_at":"2026-10-26T21:28:08+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-26T21:28:08Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (Golden Gate), `15.8.2` (Sequoia) or `26.7.2` (Tahoe), per the advisory\n- unknown","reach":"local","title":"macOS: integer overflow in file parsing crashes apps when opening crafted files","impact":"low","summary":"An integer overflow in macOS input handling can be triggered by processing a maliciously crafted file. The source says the result is unexpected app termination, which is a crash rather than code execution.","category":"other","nicknames":[],"who_cares":["macos","mac-fleet"],"confidence":0.4,"needs_auth":"no","worst_case":"Crafted file crashes an app; no code execution stated","analyst_note":"Identify which macOS component parses the crafted file and whether any code execution is possible; check the Apple security release notes linked from the NVD entry.","how_to_check":"- Check the macOS version with `sw_vers`\n- unknown","needs_analyst":true,"not_affected_if":["already-patched-macos"],"who_is_affected":"Mac machines running the macOS versions before the listed fixes. The sources do not say which app or file format is involved, so teams cannot narrow it further from this text. unknown for managed fleets that already auto-update.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000562,"input_tokens":3281,"output_tokens":467,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112540':15A,18A '-2026':14A,17A '15.8.2':76C '26.7.2':79C '27.2':73C 'address':60C 'app':8A,46B,89C 'code':54B 'craft':11A,37B,83C 'crash':7A,51B 'cve':13A,16A 'execut':55B 'file':5A,12A,38B,84C 'fix':68C 'fleet':21B 'gate':72C 'golden':71C 'handl':29B 'improv':62C 'input':28B,63C 'integ':2A,24B,57C 'issu':66C 'lead':86C 'mac':20B 'mac-fleet':19B 'maco':1A,22B,27B,70C,74C,77C 'malici':36B,82C 'may':85C 'open':10A 'overflow':3A,25B,58C 'pars':6A 'process':34B,80C 'rather':52B 'result':43B 'say':41B 'sequoia':75C 'sourc':40B 'taho':78C 'termin':47B,90C 'trigger':32B 'unexpect':45B,88C 'valid':64C","nicknames":[],"mitigations":[],"who_affected":"Mac machines running the macOS versions before the listed fixes. The sources do not say which app or file format is involved, so teams cannot narrow it further from this text. unknown for managed fleets that already auto-update.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:46+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112540","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112540","severity":null,"published_at":"2026-10-26T21:17:46+00:00","modified_at":"2026-10-26T21:17:46+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}