{"id":"CVE-2026-84496","kind":"vulnerability","aliases":["CVE-2026-84496"],"related":[],"title":"macOS: crafted disk image can crash the system or corrupt kernel memory","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.","summary":"A malicious disk image mounted on macOS can trigger an out-of-bounds write in the system. The result is an unexpected system termination or corruption of kernel memory.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoints","infrastructure","macos"],"not_affected_if":["macos-patched","no-untrusted-disk-images"],"how_to_check":"- Check the macOS version with `sw_vers -productVersion`; versions before `27.2` on Golden Gate or before `26.7.2` on Tahoe are in scope.","fix":"- Update macOS to `27.2` (macOS Golden Gate) or `26.7.2` (macOS Tahoe) or later.","status":"open","published_at":"2026-10-26T21:19:59+00:00","first_seen_at":"2026-10-26T21:55:21+00:00","triaged_at":"2026-10-26T21:57:19+00:00","updated_at":"2026-10-26T21:57:19+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-26T21:57:19Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27.2` (macOS Golden Gate) or `26.7.2` (macOS Tahoe) or later.","reach":"local","title":"macOS: crafted disk image can crash the system or corrupt kernel memory","impact":"high","summary":"A malicious disk image mounted on macOS can trigger an out-of-bounds write in the system. The result is an unexpected system termination or corruption of kernel memory.","category":"infrastructure","nicknames":[],"who_cares":["macos","endpoints"],"confidence":0.6,"needs_auth":"no","worst_case":"Kernel memory corruption or system crash after mounting a crafted disk image","analyst_note":"Sources give no CVSS score or detail on the exact trigger; check Apple security notes for the affected version ranges and whether code execution is confirmed.","how_to_check":"- Check the macOS version with `sw_vers -productVersion`; versions before `27.2` on Golden Gate or before `26.7.2` on Tahoe are in scope.","needs_analyst":true,"not_affected_if":["macos-patched","no-untrusted-disk-images"],"who_is_affected":"Any Mac that mounts disk images from untrusted sources, such as downloaded DMG files or images attached to email, may be exposed. Machines that only mount vendor-signed or internally produced images are less exposed. The sources do not say which macOS versions before the fixes are affected.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000591,"input_tokens":3292,"output_tokens":524,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-84496':15A,18A '26.7.2':76C '27.2':73C 'address':60C 'bound':35B,56C,63C 'caus':84C 'check':64C 'corrupt':10A,48B,89C 'craft':2A,80C 'crash':6A 'cve':13A,16A 'disk':3A,24B,81C 'endpoint':19B 'fix':68C 'gate':72C 'golden':71C 'imag':4A,25B,82C 'improv':62C 'infrastructur':20B 'issu':58C,66C 'kernel':11A,50B,90C 'maco':1A,21B,28B,70C,74C 'malici':23B,79C 'may':83C 'memori':12A,51B,91C 'mount':26B,77C 'out-of-bound':32B,53C 'result':41B 'system':8A,39B,45B,86C 'taho':75C 'termin':46B,87C 'trigger':30B 'unexpect':44B,85C 'write':36B,57C","nicknames":[],"mitigations":[],"who_affected":"Any Mac that mounts disk images from untrusted sources, such as downloaded DMG files or images attached to email, may be exposed. Machines that only mount vendor-signed or internally produced images are less exposed. The sources do not say which macOS versions before the fixes are affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:19:59+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84496","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84496","severity":null,"published_at":"2026-10-26T21:19:59+00:00","modified_at":"2026-10-26T21:19:59+00:00","first_seen_at":"2026-10-26T21:55:21+00:00","fetched_at":"2026-10-26T21:55:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}