{"id":"CVE-2026-112610","kind":"vulnerability","aliases":["CVE-2026-112610"],"related":[],"title":"Apple iOS and macOS: crafted PDF file corrupts memory, Apple fixes it","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted PDF file may lead to memory corruption.","summary":"An out-of-bounds write in Apple's PDF handling lets a maliciously crafted PDF corrupt memory. Memory corruption of this kind can let an attacker run code on the device, though the sources do not say that here.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","infrastructure","ios","ipados","macos","pdf"],"not_affected_if":["already-on-fixed-version"],"how_to_check":"- Check the OS version under Settings > General > About on iOS and iPadOS, or run `sw_vers -productVersion` on macOS\n- Compare against the fixed versions listed in the fix section\n- unknown for any other exposure check, as the sources do not say","fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Sequoia to `15.8.2` and macOS Tahoe to `26.7.2`","status":"open","published_at":"2026-10-26T21:17:53+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","triaged_at":"2026-10-26T21:27:27+00:00","updated_at":"2026-10-26T21:27:27+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-26T21:27:27Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Sequoia to `15.8.2` and macOS Tahoe to `26.7.2`","reach":"internet","title":"Apple iOS and macOS: crafted PDF file corrupts memory, Apple fixes it","impact":"high","summary":"An out-of-bounds write in Apple's PDF handling lets a maliciously crafted PDF corrupt memory. Memory corruption of this kind can let an attacker run code on the device, though the sources do not say that here.","category":"infrastructure","nicknames":[],"who_cares":["apple","ios","ipados","macos","pdf"],"confidence":0.6,"needs_auth":"no","worst_case":"memory corruption from a crafted PDF; code execution not confirmed","analyst_note":"Check Apple security notes for CVE-2026-112610 for exploitation details and whether code execution is confirmed.","how_to_check":"- Check the OS version under Settings > General > About on iOS and iPadOS, or run `sw_vers -productVersion` on macOS\n- Compare against the fixed versions listed in the fix section\n- unknown for any other exposure check, as the sources do not say","needs_analyst":true,"not_affected_if":["already-on-fixed-version"],"who_is_affected":"Anyone running an affected Apple OS version who opens PDF files, including in Mail, Safari or Files, is potentially exposed. Devices already on the fixed releases are not affected. unknown whether any particular configuration or role is needed beyond opening a PDF.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000624,"input_tokens":3324,"output_tokens":584,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112610':14A,17A '-2026':13A,16A '15.8.2':92C '26.7.2':81C,84C,95C '27.2':86C,89C 'address':70C 'appl':1A,10A,18B,31B 'attack':50B 'bound':28B,66C,73C 'check':74C 'code':52B 'corrupt':8A,40B,43B,106C 'craft':5A,38B,99C 'cve':12A,15A 'devic':55B 'file':7A,101C 'fix':11A,78C 'handl':34B 'improv':72C 'infrastructur':19B 'io':2A,20B,80C,85C 'ipado':21B,83C,88C 'issu':68C,76C 'kind':46B 'lead':103C 'let':35B,48B 'maco':4A,22B,90C,93C 'malici':37B,98C 'may':102C 'memori':9A,41B,42B,105C 'out-of-bound':25B,63C 'pdf':6A,23B,33B,39B,100C 'process':96C 'run':51B 'say':61B 'sequoia':91C 'sourc':58B 'taho':94C 'though':56B 'write':29B,67C","nicknames":[],"mitigations":[],"who_affected":"Anyone running an affected Apple OS version who opens PDF files, including in Mail, Safari or Files, is potentially exposed. Devices already on the fixed releases are not affected. unknown whether any particular configuration or role is needed beyond opening a PDF.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:53+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112610","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112610","severity":null,"published_at":"2026-10-26T21:17:53+00:00","modified_at":"2026-10-26T21:17:53+00:00","first_seen_at":"2026-10-26T21:20:28+00:00","fetched_at":"2026-10-26T21:20:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}