{"id":"CVE-2026-112604","kind":"vulnerability","aliases":["CVE-2026-112604"],"related":[],"title":"macOS: out-of-bounds read in file processing crashes apps on crafted files","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.","summary":"An out-of-bounds read in macOS file processing can be triggered by a maliciously crafted file. The sources say it may cause the app to terminate unexpectedly, with no code execution reported.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoints","infrastructure","macos"],"not_affected_if":["patched-macos"],"how_to_check":"- unknown","fix":"- Update macOS to `macOS Golden Gate 27.2` or `macOS Tahoe 26.7.2` or later, as stated in the advisory text.","status":"open","published_at":"2026-10-26T21:17:52+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:31+00:00","updated_at":"2026-10-26T21:27:31+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:27:31Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `macOS Golden Gate 27.2` or `macOS Tahoe 26.7.2` or later, as stated in the advisory text.","reach":"local","title":"macOS: out-of-bounds read in file processing crashes apps on crafted files","impact":"low","summary":"An out-of-bounds read in macOS file processing can be triggered by a maliciously crafted file. The sources say it may cause the app to terminate unexpectedly, with no code execution reported.","category":"infrastructure","nicknames":[],"who_cares":["macos","endpoints"],"confidence":0.5,"needs_auth":"no","worst_case":"Apps crash on opening a crafted file; no code execution reported.","analyst_note":"","how_to_check":"- unknown","needs_analyst":false,"not_affected_if":["patched-macos"],"who_is_affected":"Machines running macOS releases older than the fixed builds named in the advisory text can process such a file. The sources do not name the specific component or app, so whether a given team's workflow reaches it is unknown.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000528,"input_tokens":3276,"output_tokens":400,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112604':17A,20A '-2026':16A,19A '26.7.2':81C '27.2':78C 'address':65C 'app':11A,49B,91C 'bound':5A,28B,62C,68C 'caus':47B 'check':69C 'code':55B 'craft':13A,40B,85C 'crash':10A 'cve':15A,18A 'endpoint':21B 'execut':56B 'file':8A,14A,32B,41B,86C 'fix':73C 'gate':77C 'golden':76C 'improv':67C 'infrastructur':22B 'issu':71C 'lead':88C 'maco':1A,23B,31B,75C,79C 'malici':39B,84C 'may':46B,87C 'out-of-bound':2A,25B,59C 'process':9A,33B,82C 'read':6A,29B,63C 'report':57B 'say':44B 'sourc':43B 'taho':80C 'termin':51B,92C 'trigger':36B 'unexpect':52B,90C","nicknames":[],"mitigations":[],"who_affected":"Machines running macOS releases older than the fixed builds named in the advisory text can process such a file. The sources do not name the specific component or app, so whether a given team's workflow reaches it is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:52+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112604","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112604","severity":null,"published_at":"2026-10-26T21:17:52+00:00","modified_at":"2026-10-26T21:17:52+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}