Live › vulnerability › CVE-2026-112596
Go to dashboardAn integer overflow in video file processing on Apple platforms can be triggered by a maliciously crafted video file. The sources say the result is unexpected system termination, not code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Apple devices running iOS 27.2 or earlier, iPadOS, macOS Golden Gate, tvOS, visionOS or watchOS before 27.2 that process video files. The sources do not describe which apps or data paths reach the flaw, so unknown whether a remote sender can trigger it without any user action.
No product ranges from the sources yet.
27.2 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination.
This page as .md · .json · in your agent: get_signal("CVE-2026-112596")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.