Live › vulnerability › CVE-2026-113912
Go to dashboardAn out-of-bounds memory access in Apple's operating systems is triggered by processing a maliciously crafted media file. It may terminate the app or corrupt process memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any device running an Apple OS version earlier than the fixed releases can be affected when it processes a crafted media file. The sources do not name the specific media framework or app path involved. Devices already on the listed fixed versions are not affected.
No product ranges from the sources yet.
sw_vers on macOS26.7 or 27.215.8.2, macOS Tahoe to 26.7.2, or macOS Golden Gate to 27.227.2Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-113912")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.