Skip to content
NewA calmer, faster ZeroHour
Vulnerability

CVE-2026-113970

Use-after-free in Apple OSes over Bluetooth range

CVSS 3.1
8.8 high
EPSS
—
Published
·
Modified
Analyze CVE-2026-113970 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

A use-after-free in Apple memory management can let someone within Bluetooth range corrupt process memory. No account or user interaction is required. Memory corruption can expose, change, or crash the affected process. Fixed releases cover iOS, iPadOS, macOS, visionOS, and watchOS; Apple has not listed affected builds.

What to do: Update to the fixed build Apple lists: iOS/iPadOS 18.7.12, 26.7.3, or 27.2.1; macOS Sequoia 15.8.3, Tahoe 26.7.3, or Golden Gate 27.2.1; visionOS 27.2.1; watchOS 26.6.1 or 27.2.1.

ProductAffectedFixed in
Apple iOS—18.7.12, 26.7.3, and 27.2.1
Apple iPadOS—18.7.12, 26.7.3, and 27.2.1
Apple macOS Golden Gate—27.2.1
Apple macOS Sequoia—15.8.3
Apple macOS Tahoe—26.7.3
Apple visionOS—27.2.1
Apple watchOS—26.6.1 and 27.2.1
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

Weakness
CWE-416
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (—)

In the news

4 stories