{"id":"CVE-2026-113939","kind":"vulnerability","aliases":["CVE-2026-113939"],"related":[],"title":"macOS: crafted disk image can crash the system or corrupt kernel memory","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.","summary":"An out-of-bounds write in macOS lets a maliciously crafted disk image cause a system crash or corrupt kernel memory when mounted. The sources say the flaw is fixed in macOS Golden Gate 27.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoints","infrastructure","macos"],"not_affected_if":["patched-to-27.2"],"how_to_check":"- Check the installed macOS version under Apple menu > About This Mac, or with `sw_vers -productVersion`\n- unknown for any other check, as the sources do not say","fix":"- Update macOS to Golden Gate 27.2 or later, as the sources say the issue is fixed in that release\n- unknown for any other mitigation, as the sources do not say","status":"open","published_at":"2026-10-26T21:18:09+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","triaged_at":"2026-10-26T21:21:46+00:00","updated_at":"2026-10-26T21:21:46+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:21:46Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to Golden Gate 27.2 or later, as the sources say the issue is fixed in that release\n- unknown for any other mitigation, as the sources do not say","reach":"local","title":"macOS: crafted disk image can crash the system or corrupt kernel memory","impact":"high","summary":"An out-of-bounds write in macOS lets a maliciously crafted disk image cause a system crash or corrupt kernel memory when mounted. The sources say the flaw is fixed in macOS Golden Gate 27.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","endpoints"],"confidence":0.5,"needs_auth":"no","worst_case":"Kernel memory corruption or unexpected system termination after mounting a crafted disk image","analyst_note":"Check Apple's security release notes for the affected macOS versions and whether a CVSS score or exploitation status exists for CVE-2026-113939.","how_to_check":"- Check the installed macOS version under Apple menu > About This Mac, or with `sw_vers -productVersion`\n- unknown for any other check, as the sources do not say","needs_analyst":true,"not_affected_if":["patched-to-27.2"],"who_is_affected":"Macs running macOS versions before Golden Gate 27.2 are affected when a user mounts a disk image. The sources do not say which earlier releases are vulnerable. Systems already on Golden Gate 27.2 or later are not affected.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000597,"input_tokens":3277,"output_tokens":538,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-113939':15A,18A '-2026':14A,17A '27.2':57B,79C 'address':66C 'bound':26B,62C,69C 'caus':36B,87C 'check':70C 'corrupt':10A,41B,92C 'craft':2A,33B,83C 'crash':6A,39B 'cve':13A,16A 'disk':3A,34B,84C 'endpoint':19B 'fix':52B,74C 'flaw':50B 'gate':56B,78C 'golden':55B,77C 'imag':4A,35B,85C 'improv':68C 'infrastructur':20B 'issu':64C,72C 'kernel':11A,42B,93C 'let':30B 'maco':1A,21B,29B,54B,76C 'malici':32B,82C 'may':86C 'memori':12A,43B,94C 'mount':45B,80C 'out-of-bound':23B,59C 'say':48B 'sourc':47B 'system':8A,38B,89C 'termin':90C 'unexpect':88C 'write':27B,63C","nicknames":[],"mitigations":[],"who_affected":"Macs running macOS versions before Golden Gate 27.2 are affected when a user mounts a disk image. The sources do not say which earlier releases are vulnerable. Systems already on Golden Gate 27.2 or later are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:09+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113939","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113939","severity":null,"published_at":"2026-10-26T21:18:09+00:00","modified_at":"2026-10-26T21:18:09+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","fetched_at":"2026-10-26T21:20:31+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}