Live › vulnerability › CVE-2026-112608
Go to dashboardA malformed Bluetooth packet triggers an out-of-bounds read in Apple's operating systems, which can expose process memory. The fix ships in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Apple device running a release before the 27 series with Bluetooth enabled is in scope, since the packet is processed by the Bluetooth stack. Sources do not say whether pairing or a nearby attacker is required, so treat Bluetooth-enabled devices as the affected group. Teams that manage only fleets already on the 27 series can skip it.
No product ranges from the sources yet.
sw_vers -productVersion on macOS) and compare it with the fixed releases.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-112608")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.