{"id":"CVE-2026-112544","kind":"vulnerability","aliases":["CVE-2026-112544"],"related":[],"title":"macOS: malicious disk image mount crashes the system via out-of-bounds write","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may cause unexpected system termination.","summary":"An out-of-bounds write in macOS lets a malicious disk image cause unexpected system termination when mounted. The sources describe a crash, not code execution.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","macos","workstations"],"not_affected_if":["fixed-version"],"how_to_check":"- Check the macOS version with `sw_vers` and compare it against the fixed release named in the advisory.","fix":"- Update macOS to Golden Gate 27.2 or later.","status":"open","published_at":"2026-10-26T21:17:47+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","triaged_at":"2026-10-26T21:28:05+00:00","updated_at":"2026-10-26T21:28:05+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:28:05Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to Golden Gate 27.2 or later.","reach":"local","title":"macOS: malicious disk image mount crashes the system via out-of-bounds write","impact":"low","summary":"An out-of-bounds write in macOS lets a malicious disk image cause unexpected system termination when mounted. The sources describe a crash, not code execution.","category":"infrastructure","nicknames":[],"who_cares":["macos","workstations"],"confidence":0.5,"needs_auth":"no","worst_case":"System crashes or terminates unexpectedly after mounting a malicious disk image","analyst_note":"Confirm the affected macOS version range and whether the flaw allows more than a crash, using the Apple security release notes and the NVD entry.","how_to_check":"- Check the macOS version with `sw_vers` and compare it against the fixed release named in the advisory.","needs_analyst":true,"not_affected_if":["fixed-version"],"who_is_affected":"Any Mac running a macOS release older than Golden Gate 27.2 can be crashed by mounting a malicious disk image. The sources do not say which earlier releases are affected. Systems that never mount disk images from untrusted sources have less exposure.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000552,"input_tokens":3263,"output_tokens":452,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112544':17A,20A '-2026':16A,19A '27.2':72C 'address':59C 'bound':13A,28B,55C,62C 'caus':37B,79C 'check':63C 'code':49B 'crash':6A,47B 'cve':15A,18A 'describ':45B 'disk':3A,35B,76C 'execut':50B 'fix':67C 'gate':71C 'golden':70C 'imag':4A,36B,77C 'improv':61C 'infrastructur':21B 'issu':57C,65C 'let':32B 'maco':1A,22B,31B,69C 'malici':2A,34B,75C 'may':78C 'mount':5A,42B,73C 'out-of-bound':10A,25B,52C 'sourc':44B 'system':8A,39B,81C 'termin':40B,82C 'unexpect':38B,80C 'via':9A 'workstat':23B 'write':14A,29B,56C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running a macOS release older than Golden Gate 27.2 can be crashed by mounting a malicious disk image. The sources do not say which earlier releases are affected. Systems that never mount disk images from untrusted sources have less exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:47+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112544","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112544","severity":null,"published_at":"2026-10-26T21:17:47+00:00","modified_at":"2026-10-26T21:17:47+00:00","first_seen_at":"2026-10-26T21:20:27+00:00","fetched_at":"2026-10-26T21:20:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}