{"id":"CVE-2026-112560","kind":"vulnerability","aliases":["CVE-2026-112560"],"related":[],"title":"Apple image processing bug leaks process memory via crafted image","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.","summary":"An out-of-bounds read in Apple's image processing lets a maliciously crafted image disclose process memory. Apple fixed it with improved bounds checking in several OS releases.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","ios","ipados","macos","tvos","vendor","visionos","watchos"],"not_affected_if":["fixed-version"],"how_to_check":"- Check the device or Mac OS version under Settings > General > About (iOS/iPadOS/visionOS/watchOS/tvOS) or Apple menu > About This Mac (macOS).","fix":"- Update iOS and iPadOS to `26.7.2`.\n- Update macOS Tahoe to `26.7.2` and macOS Sequoia to `15.8.2`.\n- Update tvOS, visionOS and watchOS to `27.2`.","status":"open","published_at":"2026-10-26T21:17:49+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:51+00:00","updated_at":"2026-10-26T21:27:51+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-26T21:27:51Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7.2`.\n- Update macOS Tahoe to `26.7.2` and macOS Sequoia to `15.8.2`.\n- Update tvOS, visionOS and watchOS to `27.2`.","reach":"unknown","title":"Apple image processing bug leaks process memory via crafted image","impact":"low","summary":"An out-of-bounds read in Apple's image processing lets a maliciously crafted image disclose process memory. Apple fixed it with improved bounds checking in several OS releases.","category":"vendor","nicknames":[],"who_cares":["apple","ios","macos","ipados","visionos","watchos","tvos"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker reads process memory through a crafted image","analyst_note":"Check Apple's security release notes for this CVE to confirm the affected image path and whether user interaction is required; sources only give the NVD entry.","how_to_check":"- Check the device or Mac OS version under Settings > General > About (iOS/iPadOS/visionOS/watchOS/tvOS) or Apple menu > About This Mac (macOS).","needs_analyst":true,"not_affected_if":["fixed-version"],"who_is_affected":"Users of the listed Apple operating system releases who process images from untrusted sources, such as messages, web pages or downloads. Devices already on the fixed versions are not affected. The sources do not say which image format or app path is involved.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000606,"input_tokens":3327,"output_tokens":547,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112560':13A,16A '-2026':12A,15A '15.8.2':79C '26.7.2':73C,76C,82C '27.2':84C,86C,88C 'address':62C 'appl':1A,17B,32B,44B 'bound':29B,49B,59C,65C 'bug':4A 'check':50B,66C 'craft':9A,39B,92C 'cve':11A,14A 'disclos':41B 'disclosur':97C 'fix':45B,70C 'imag':2A,10A,34B,40B,93C 'improv':48B,64C 'io':18B,72C 'ipado':19B,75C 'issu':68C 'leak':5A 'let':36B 'maco':20B,77C,80C 'malici':38B,91C 'may':94C 'memori':7A,43B,100C 'os':53B 'out-of-bound':26B,56C 'process':3A,6A,35B,42B,89C,99C 'read':30B,60C 'releas':54B 'result':95C 'sequoia':78C 'sever':52B 'taho':81C 'tvos':21B,83C 'vendor':22B 'via':8A 'visiono':23B,85C 'watcho':24B,87C","nicknames":[],"mitigations":[],"who_affected":"Users of the listed Apple operating system releases who process images from untrusted sources, such as messages, web pages or downloads. Devices already on the fixed versions are not affected. The sources do not say which image format or app path is involved.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:49+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112560","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112560","severity":null,"published_at":"2026-10-26T21:17:49+00:00","modified_at":"2026-10-26T21:17:49+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}