Live › vulnerability › CVE-2026-113943
Go to dashboardAn out-of-bounds write in macOS lets a maliciously crafted disk image cause a system crash or corrupt kernel memory when mounted. Apple fixed it with improved bounds checking in macOS Golden Gate 27.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Any Mac running a macOS release before Golden Gate 27.2 can be affected when a user mounts a disk image. The sources do not say whether the image must come from an untrusted source to trigger it, so treat any downloaded disk image as the trigger path. Managed fleets that have already moved to 27.2 or later can skip it.
No product ranges from the sources yet.
sw_vers -productVersion in Terminal27.2 or later via System Settings > General > Software UpdateEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-113943")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.