{"id":"CVE-2026-112634","kind":"vulnerability","aliases":["CVE-2026-112634"],"related":[],"title":"Apple iOS and macOS: crafted image crashes apps through out-of-bounds read","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may lead to unexpected app termination.","summary":"An out-of-bounds read in Apple's image processing lets a maliciously crafted image terminate the app that opens it. The sources describe unexpected app termination, not code execution or data theft.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","ios","ipados","macos","other","visionos"],"not_affected_if":["already-patched-version"],"how_to_check":"- Check the device OS version in Settings > General > About (iOS, iPadOS, visionOS) or `sw_vers -productVersion` on macOS, and compare against the fixed versions.","fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`\n- Update visionOS to `27.2`","status":"open","published_at":"2026-10-26T21:17:57+00:00","first_seen_at":"2026-10-26T21:20:29+00:00","triaged_at":"2026-10-26T21:24:06+00:00","updated_at":"2026-10-26T21:24:06+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-26T21:24:06Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`\n- Update visionOS to `27.2`","reach":"unknown","title":"Apple iOS and macOS: crafted image crashes apps through out-of-bounds read","impact":"low","summary":"An out-of-bounds read in Apple's image processing lets a maliciously crafted image terminate the app that opens it. The sources describe unexpected app termination, not code execution or data theft.","category":"other","nicknames":[],"who_cares":["ios","ipados","macos","visionos","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"Apps crash when processing a malicious image","analyst_note":"","how_to_check":"- Check the device OS version in Settings > General > About (iOS, iPadOS, visionOS) or `sw_vers -productVersion` on macOS, and compare against the fixed versions.","needs_analyst":false,"not_affected_if":["already-patched-version"],"who_is_affected":"Apple devices running the listed OS versions or earlier are affected, since the flaw is in how the system processes images. The sources do not say which image formats or apps trigger it, so any device that opens untrusted images should be updated. Devices already on the fixed versions can skip this.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.000598,"input_tokens":3342,"output_tokens":527,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112634':17A,20A '-2026':16A,19A '15.8.2':96C '26.7.2':81C,84C,99C '27.2':86C,89C,93C,101C 'address':70C 'app':8A,47B,55B,111C 'appl':1A,22B,36B 'apple-devic':21B 'bound':13A,33B,67C,73C 'check':74C 'code':58B 'craft':5A,43B,105C 'crash':7A 'cve':15A,18A 'data':61B 'describ':53B 'devic':23B 'execut':59B 'fix':78C 'gate':92C 'golden':91C 'imag':6A,38B,44B,106C 'improv':72C 'io':2A,24B,80C,85C 'ipado':25B,83C,88C 'issu':76C 'lead':108C 'let':40B 'maco':4A,26B,90C,94C,97C 'malici':42B,104C 'may':107C 'open':49B 'out-of-bound':10A,30B,64C 'process':39B,102C 'read':14A,34B,68C 'sequoia':95C 'sourc':52B 'taho':98C 'termin':45B,56B,112C 'theft':62B 'unexpect':54B,110C 'visiono':28B,100C","nicknames":[],"mitigations":[],"who_affected":"Apple devices running the listed OS versions or earlier are affected, since the flaw is in how the system processes images. The sources do not say which image formats or apps trigger it, so any device that opens untrusted images should be updated. Devices already on the fixed versions can skip this.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:17:57+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112634","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112634","severity":null,"published_at":"2026-10-26T21:17:57+00:00","modified_at":"2026-10-26T21:17:57+00:00","first_seen_at":"2026-10-26T21:20:29+00:00","fetched_at":"2026-10-26T21:20:29+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}