Out-of-Bounds Write Vulnerability in Apple iOS and macOS Products
CVE-2026-112611

Currently unrated

Key Information:

Vendor

Apple

Vendor
CVE Published:
26 October 2026

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸก Public PoC

What is CVE-2026-112611?

An out-of-bounds write vulnerability has been identified in Apple iOS and macOS products, leading to potential memory corruption when processing maliciously crafted PDF files. The issue arises due to insufficient bounds checking, which may allow attackers to exploit the vulnerability and execute arbitrary code. Users are strongly advised to update their devices to the latest versions to mitigate this security risk.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 15.8.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.