{"id":"CVE-2026-112625","kind":"vulnerability","aliases":["CVE-2026-112625"],"related":[],"title":"Apple iOS and macOS: crafted image causes memory corruption","description":"An integer underflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may result in memory corruption.","summary":"An integer underflow in Apple's image processing lets a maliciously crafted image corrupt memory on an affected Apple device. The sources do not say whether this leads to code execution.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","ios","ipados","macos","vendor"],"not_affected_if":["already-on-fixed-build"],"how_to_check":"- Check the device version under Settings > General > About (iOS/iPadOS) or `sw_vers -productVersion` (macOS)\n- Compare against the fixed builds: iOS and iPadOS 26.7.2 or 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2","fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`","status":"open","published_at":"2026-10-26T21:17:55+00:00","first_seen_at":"2026-10-26T21:20:29+00:00","triaged_at":"2026-10-26T21:25:14+00:00","updated_at":"2026-10-26T21:25:14+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-26T21:25:14Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`","reach":"unknown","title":"Apple iOS and macOS: crafted image causes memory corruption","impact":"high","summary":"An integer underflow in Apple's image processing lets a maliciously crafted image corrupt memory on an affected Apple device. The sources do not say whether this leads to code execution.","category":"vendor","nicknames":[],"who_cares":["ios","ipados","macos","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"Memory corruption from a crafted image; code execution not stated","analyst_note":"Check the Apple security notes for CVE-2026-112625 to confirm the affected image path, whether it is exploited, and whether user interaction is needed.","how_to_check":"- Check the device version under Settings > General > About (iOS/iPadOS) or `sw_vers -productVersion` (macOS)\n- Compare against the fixed builds: iOS and iPadOS 26.7.2 or 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2","needs_analyst":true,"not_affected_if":["already-on-fixed-build"],"who_is_affected":"Anyone running an Apple OS release older than the fixed builds on an iPhone, iPad or Mac is exposed to images that trigger the flaw. Teams that manage Apple devices should confirm their fleet is on a fixed release. The sources do not say which image formats or apps are affected, so the exact trigger path is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000653,"input_tokens":3320,"output_tokens":642,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112625':12A,15A '-2026':11A,14A '15.8.2':84C '26.7.2':69C,72C,87C '27.2':74C,77C,81C 'address':58C 'affect':40B 'appl':1A,17B,27B,41B 'apple-devic':16B 'caus':7A 'code':52B 'corrupt':9A,36B,97C 'craft':5A,34B,91C 'cve':10A,13A 'devic':18B,42B 'execut':53B 'fix':66C 'gate':80C 'golden':79C 'imag':6A,29B,35B,92C 'improv':60C 'input':61C 'integ':24B,55C 'io':2A,19B,68C,73C 'ipado':20B,71C,76C 'issu':64C 'lead':50B 'let':31B 'maco':4A,21B,78C,82C,85C 'malici':33B,90C 'may':93C 'memori':8A,37B,96C 'process':30B,88C 'result':94C 'say':47B 'sequoia':83C 'sourc':44B 'taho':86C 'underflow':25B,56C 'valid':62C 'vendor':22B 'whether':48B","nicknames":[],"mitigations":[],"who_affected":"Anyone running an Apple OS release older than the fixed builds on an iPhone, iPad or Mac is exposed to images that trigger the flaw. Teams that manage Apple devices should confirm their fleet is on a fixed release. The sources do not say which image formats or apps are affected, so the exact trigger path is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:55+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112625","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112625","severity":null,"published_at":"2026-10-26T21:17:55+00:00","modified_at":"2026-10-26T21:17:55+00:00","first_seen_at":"2026-10-26T21:20:29+00:00","fetched_at":"2026-10-26T21:20:29+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}