---
id: "CVE-2026-112596"
kind: "vulnerability"
aliases: ["CVE-2026-112596"]
title: "Apple OS: crafted video file can crash the system"
severity: "low"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["apple", "infrastructure", "ios", "ipados", "macos", "tvos", "visionos", "watchos"]
not_affected_if: ["already-on-27.2"]
published_at: "2026-10-26T21:17:52+00:00"
first_seen_at: "2026-10-26T21:20:28+00:00"
updated_at: "2026-10-26T21:27:34+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112596", "first_seen_at": "2026-10-26T21:20:28+00:00"}]
---

# Apple OS: crafted video file can crash the system

An integer overflow in video file processing on Apple platforms can be triggered by a maliciously crafted video file. The sources say the result is unexpected system termination, not code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the OS version on each Apple device: iOS or iPadOS, macOS, tvOS, visionOS, watchOS, compared against 27.2 (unknown whether the sources list exact build strings)

## Fix

- Update iOS and iPadOS, macOS, tvOS, visionOS and watchOS to `27.2` or later

## Timeline

- 2026-10-26T21:20:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112596

## From the sources

An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_