{"id":"CVE-2026-112698","kind":"vulnerability","aliases":["CVE-2026-112698"],"related":[],"title":"Apple iOS and macOS: memory handling flaw lets an app crash the system","description":"The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.","summary":"A memory handling flaw in Apple's operating systems lets a malicious app cause an unexpected system termination. The sources describe a denial of service, not code execution or data theft.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","ios","ipados","macos"],"not_affected_if":["already-patched"],"how_to_check":"- Check the device version in Settings > General > About (iOS, iPadOS) or Apple menu > About This Mac (macOS)\n- Compare against the fixed builds listed in the advisory: `iOS 26.7.2`, `iPadOS 26.7.2`, `iOS 27.2`, `iPadOS 27.2`, `macOS Golden Gate 27.2`, `macOS Sequoia 15.8.2`, `macOS Tahoe 26.7.2`","fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`","status":"open","published_at":"2026-10-26T21:18:04+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","triaged_at":"2026-10-26T21:23:17+00:00","updated_at":"2026-10-26T21:23:17+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-26T21:23:17Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7.2` or `27.2`\n- Update macOS Tahoe to `26.7.2`, macOS Sequoia to `15.8.2`, or macOS Golden Gate to `27.2`","reach":"local","title":"Apple iOS and macOS: memory handling flaw lets an app crash the system","impact":"low","summary":"A memory handling flaw in Apple's operating systems lets a malicious app cause an unexpected system termination. The sources describe a denial of service, not code execution or data theft.","category":"infrastructure","nicknames":[],"who_cares":["ios","ipados","macos","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"Denial of service: the system terminates unexpectedly.","analyst_note":"","how_to_check":"- Check the device version in Settings > General > About (iOS, iPadOS) or Apple menu > About This Mac (macOS)\n- Compare against the fixed builds listed in the advisory: `iOS 26.7.2`, `iPadOS 26.7.2`, `iOS 27.2`, `iPadOS 27.2`, `macOS Golden Gate 27.2`, `macOS Sequoia 15.8.2`, `macOS Tahoe 26.7.2`","needs_analyst":false,"not_affected_if":["already-patched"],"who_is_affected":"Devices running Apple operating systems older than the fixed builds are affected. The sources describe an app triggering the crash, so any installed app is the potential trigger. Managed fleets should prioritise updates; devices already on the fixed builds are not affected.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.00063,"input_tokens":3311,"output_tokens":597,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112698':16A,19A '-2026':15A,18A '15.8.2':87C '26.7.2':72C,75C,90C '27.2':77C,80C,84C 'abl':95C 'address':61C 'app':10A,39B,92C 'appl':1A,21B,32B 'apple-devic':20B 'caus':40B,97C 'code':53B 'crash':11A 'cve':14A,17A 'data':56B 'denial':49B 'describ':47B 'devic':22B 'execut':54B 'fix':69C 'flaw':7A,30B 'gate':83C 'golden':82C 'handl':6A,29B,65C 'improv':63C 'infrastructur':23B 'io':2A,24B,71C,76C 'ipado':25B,74C,79C 'issu':59C,67C 'let':8A,36B 'maco':4A,26B,81C,85C,88C 'malici':38B 'may':93C 'memori':5A,28B,64C 'oper':34B 'sequoia':86C 'servic':51B 'sourc':46B 'system':13A,35B,43B,99C 'taho':89C 'termin':44B,100C 'theft':57B 'unexpect':42B,98C","nicknames":[],"mitigations":[],"who_affected":"Devices running Apple operating systems older than the fixed builds are affected. The sources describe an app triggering the crash, so any installed app is the potential trigger. Managed fleets should prioritise updates; devices already on the fixed builds are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:04+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112698","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112698","severity":null,"published_at":"2026-10-26T21:18:04+00:00","modified_at":"2026-10-26T21:18:04+00:00","first_seen_at":"2026-10-26T21:20:30+00:00","fetched_at":"2026-10-26T21:20:30+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}