{"id":"CVE-2026-113943","kind":"vulnerability","aliases":["CVE-2026-113943"],"related":[],"title":"Apple macOS: crafted disk image can crash system or corrupt kernel memory","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.","summary":"An out-of-bounds write in macOS lets a maliciously crafted disk image cause a system crash or corrupt kernel memory when mounted. Apple fixed it with improved bounds checking in macOS Golden Gate 27.2.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["macos-27.2-or-later"],"how_to_check":"- Check the macOS version under Apple menu > About This Mac, or run `sw_vers -productVersion` in Terminal\n- unknown whether a specific build is affected beyond versions before macOS Golden Gate 27.2","fix":"- Update macOS to Golden Gate `27.2` or later via System Settings > General > Software Update","status":"open","published_at":"2026-10-26T21:18:10+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","triaged_at":"2026-10-26T21:21:42+00:00","updated_at":"2026-10-26T21:21:42+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:21:42Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to Golden Gate `27.2` or later via System Settings > General > Software Update","reach":"local","title":"Apple macOS: crafted disk image can crash system or corrupt kernel memory","impact":"high","summary":"An out-of-bounds write in macOS lets a maliciously crafted disk image cause a system crash or corrupt kernel memory when mounted. Apple fixed it with improved bounds checking in macOS Golden Gate 27.2.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"no","worst_case":"Kernel memory corrupted, or the machine crashes, when a crafted disk image is mounted","analyst_note":"Check Apple's security notes for Golden Gate 27.2 to confirm the CVE, the exact affected versions and whether code execution is possible, not just corruption.","how_to_check":"- Check the macOS version under Apple menu > About This Mac, or run `sw_vers -productVersion` in Terminal\n- unknown whether a specific build is affected beyond versions before macOS Golden Gate 27.2","needs_analyst":true,"not_affected_if":["macos-27.2-or-later"],"who_is_affected":"Any Mac running a macOS release before Golden Gate 27.2 can be affected when a user mounts a disk image. The sources do not say whether the image must come from an untrusted source to trigger it, so treat any downloaded disk image as the trigger path. Managed fleets that have already moved to 27.2 or later can skip it.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.000617,"input_tokens":3277,"output_tokens":579,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-113943':15A,18A '-2026':14A,17A '27.2':59B,81C 'address':68C 'appl':1A,20B,48B 'apple-devic':19B 'bound':28B,53B,64C,71C 'caus':38B,89C 'check':54B,72C 'corrupt':10A,43B,94C 'craft':3A,35B,85C 'crash':7A,41B 'cve':13A,16A 'devic':21B 'disk':4A,36B,86C 'fix':49B,76C 'gate':58B,80C 'golden':57B,79C 'imag':5A,37B,87C 'improv':52B,70C 'infrastructur':22B 'issu':66C,74C 'kernel':11A,44B,95C 'let':32B 'maco':2A,23B,31B,56B,78C 'malici':34B,84C 'may':88C 'memori':12A,45B,96C 'mount':47B,82C 'out-of-bound':25B,61C 'system':8A,40B,91C 'termin':92C 'unexpect':90C 'write':29B,65C","nicknames":[],"mitigations":[],"who_affected":"Any Mac running a macOS release before Golden Gate 27.2 can be affected when a user mounts a disk image. The sources do not say whether the image must come from an untrusted source to trigger it, so treat any downloaded disk image as the trigger path. Managed fleets that have already moved to 27.2 or later can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:18:10+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113943","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113943","severity":null,"published_at":"2026-10-26T21:18:10+00:00","modified_at":"2026-10-26T21:18:10+00:00","first_seen_at":"2026-10-26T21:20:31+00:00","fetched_at":"2026-10-26T21:20:31+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}