Out-of-Bounds Write Vulnerability in Apple Safari and iOS Products
CVE-2026-112621

Currently unrated

Key Information:

Vendor

Apple
Status
Safari
iOS And iPad OS
Mac OS
Visionos
Vendor
CVE Published:
26 October 2026

What is CVE-2026-112621?

An out-of-bounds write issue in various Apple products has been resolved through enhanced bounds checking mechanisms. This vulnerability allows attackers to craft malicious images that, when processed, can lead to memory corruption. The affected versions include Safari 27.2, iOS 26.7.2, iPadOS 26.7.2, and others. Users are encouraged to update their devices to the latest versions to mitigate any potential risks.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 27.2

References

https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.