Skip to content
NewA calmer, faster ZeroHour
Vulnerability

CVE-2026-112415

Out-of-bounds write in Apple OS via a local app

CVSS 3.1
6.5 medium
EPSS
—
Published
·
Modified
Analyze CVE-2026-112415 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

Apple fixed an out-of-bounds write in several operating systems by improving input validation. A local app can trigger it and cause unexpected system termination or corrupt process memory. Users of affected iOS, iPadOS, macOS, and visionOS releases are affected. Apple has not listed the vulnerable build ranges.

What to do: Update to iOS/iPadOS 26.7.2 or 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, or visionOS 27.2.

ProductAffectedFixed in
Apple iOS—26.7.2, 27.2
Apple iPadOS—26.7.2, 27.2
Apple macOS Golden Gate—27.2
Apple macOS Sequoia—15.8.2
Apple macOS Tahoe—26.7.2
Apple visionOS—27.2
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to cause unexpected system termination or corrupt process memory.

Weakness
CWE-787
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (—)

In the news

2 stories