Integer Overflow Vulnerability in Apple iOS and macOS Products
CVE-2026-112565

7.5HIGH

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112565?

An integer overflow vulnerability has been identified in Apple's iOS, iPadOS, and macOS products. This issue arises during the processing of maliciously crafted 3D models, leading to potential memory corruption. Apple has provided fixes in the latest versions of iOS, iPadOS, macOS, and visionOS to enhance input validation and mitigate the risk associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 26.7

iOS and iPadOS 0 < 27.2

macOS 0 < 15.8.2

References

https://support.apple.com/en-us/149041

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112565 Data

JSON