VDB

CVE-2026-112633

CVE-2026-112633 PUBLISHED CVSS 6.5 MEDIUM

Reported by apple · Published October 26, 2026

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may lead to unexpected app termination.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
AppleiOS and iPadOS0, 0
ApplemacOS0, 0, 0
ApplemacOS0, 0, 0
AppleiOS and iPadOS0, 0

Timeline

  • Oct 26, 2026 CVE Published
  • Oct 27, 2026 EPSS Score
  • Oct 27, 2026 Coalition ESS Score
  • Oct 27, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›