Out-of-Bounds Write Vulnerability in Apple's iOS and macOS Products
CVE-2026-112456

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112456?

An out-of-bounds write vulnerability has been identified in Apple's iOS and macOS platforms, allowing a maliciously crafted file to cause heap corruption. This flaw was addressed by implementing enhanced input validation measures in recent updates. It’s critical for users to install the latest patches to safeguard their devices from potential exploitation.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 15.8.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112456 Data

JSON