---
id: "CVE-2026-112687"
kind: "vulnerability"
aliases: ["CVE-2026-112687"]
title: "Apple iOS and iPadOS: local network attack can crash system or corrupt memory"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["apple-devices", "infrastructure", "ios", "ipados", "tvos"]
not_affected_if: ["up-to-date-os"]
published_at: "2026-10-26T21:18:03+00:00"
first_seen_at: "2026-10-26T21:20:30+00:00"
updated_at: "2026-10-26T21:23:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112687", "first_seen_at": "2026-10-26T21:20:30+00:00"}]
---

# Apple iOS and iPadOS: local network attack can crash system or corrupt memory

Apple fixed a flaw in iOS 27.2, iPadOS 27.2 and tvOS 27.2 by removing the vulnerable code. An attacker on the local network may be able to crash the system or corrupt process memory.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the device version under Settings > General > About (or `sw_vers` on macOS-based hardware is not applicable; use the device settings).
- unknown

## Fix

- Update iOS and iPadOS to `27.2` or later.
- Update tvOS to `27.2` or later.

## Timeline

- 2026-10-26T21:20:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112687

## From the sources

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_