Live › vulnerability › CVE-2026-112625
Go to dashboardAn integer underflow in Apple's image processing lets a maliciously crafted image corrupt memory on an affected Apple device. The sources do not say whether this leads to code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Anyone running an Apple OS release older than the fixed builds on an iPhone, iPad or Mac is exposed to images that trigger the flaw. Teams that manage Apple devices should confirm their fleet is on a fixed release. The sources do not say which image formats or apps are affected, so the exact trigger path is unknown.
No product ranges from the sources yet.
sw_vers -productVersion (macOS)26.7.2 or 27.226.7.2, macOS Sequoia to 15.8.2, or macOS Golden Gate to 27.2Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may result in memory corruption.
This page as .md · .json · in your agent: get_signal("CVE-2026-112625")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.