{"id":"CVE-2026-112687","kind":"vulnerability","aliases":["CVE-2026-112687"],"related":[],"title":"Apple iOS and iPadOS: local network attack can crash system or corrupt memory","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.","summary":"Apple fixed a flaw in iOS 27.2, iPadOS 27.2 and tvOS 27.2 by removing the vulnerable code. An attacker on the local network may be able to crash the system or corrupt process memory.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","ios","ipados","tvos"],"not_affected_if":["up-to-date-os"],"how_to_check":"- Check the device version under Settings > General > About (or `sw_vers` on macOS-based hardware is not applicable; use the device settings).\n- unknown","fix":"- Update iOS and iPadOS to `27.2` or later.\n- Update tvOS to `27.2` or later.","status":"open","published_at":"2026-10-26T21:18:03+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","triaged_at":"2026-10-26T21:23:27+00:00","updated_at":"2026-10-26T21:23:27+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:23:27Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `27.2` or later.\n- Update tvOS to `27.2` or later.","reach":"network","title":"Apple iOS and iPadOS: local network attack can crash system or corrupt memory","impact":"medium","summary":"Apple fixed a flaw in iOS 27.2, iPadOS 27.2 and tvOS 27.2 by removing the vulnerable code. An attacker on the local network may be able to crash the system or corrupt process memory.","category":"infrastructure","nicknames":[],"who_cares":["ios","ipados","tvos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker on local network crashes system or corrupts process memory","analyst_note":"Find Apple's security notice for iOS 27.2 to confirm the affected component, the trigger and the exact fixed builds for each device family.","how_to_check":"- Check the device version under Settings > General > About (or `sw_vers` on macOS-based hardware is not applicable; use the device settings).\n- unknown","needs_analyst":true,"not_affected_if":["up-to-date-os"],"who_is_affected":"Devices running iOS, iPadOS or tvOS builds older than 27.2 on a network an attacker can reach. The sources do not say which device models or configurations are exposed beyond that.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000581,"input_tokens":3273,"output_tokens":507,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112687':16A,19A '-2026':15A,18A '27.2':33B,35B,38B,76C,79C,81C 'abl':52B,90C 'address':64C 'appl':1A,21B,27B 'apple-devic':20B 'attack':7A,45B,83C 'caus':92C 'code':43B,69C 'corrupt':12A,58B,97C 'crash':9A,54B 'cve':14A,17A 'devic':22B 'fix':28B,73C 'flaw':30B 'infrastructur':23B 'io':2A,24B,32B,75C 'ipado':4A,25B,34B,78C 'issu':62C,71C 'local':5A,48B,86C 'may':50B,88C 'memori':13A,60B,99C 'network':6A,49B,87C 'process':59B,98C 'remov':40B,66C 'system':10A,56B,94C 'termin':95C 'tvos':26B,37B,80C 'unexpect':93C 'vulner':42B,68C","nicknames":[],"mitigations":[],"who_affected":"Devices running iOS, iPadOS or tvOS builds older than 27.2 on a network an attacker can reach. The sources do not say which device models or configurations are exposed beyond that.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:03+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112687","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112687","severity":null,"published_at":"2026-10-26T21:18:03+00:00","modified_at":"2026-10-26T21:18:03+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","fetched_at":"2026-10-26T21:20:30+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}