Integer Overflow Vulnerability in visionOS by Apple
CVE-2026-112417

Currently unrated

Key Information:

Vendor: Apple
Status: Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112417?

An integer overflow vulnerability exists in visionOS, which can be exploited by processing a specially crafted 3D model. This flaw arises from insufficient input validation that can lead to memory corruption. The issue has been addressed in visionOS 27.2, emphasizing the importance of promptly updating to this version to mitigate potential risks.

Affected Version(s)

visionOS 0 < 27.2

References

https://support.apple.com/en-us/149526

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112417 Data

JSON