Out-of-Bounds Read Vulnerability in Apple iOS and macOS Products
CVE-2026-112656

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-112656?

An out-of-bounds read vulnerability exists within Apple’s operating systems, allowing attackers to exploit maliciously crafted fonts. This flaw can lead to the unintended disclosure of sensitive process memory, posing risks to user confidentiality and system security. Apple has addressed this issue through improved bounds checking across various versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, ensuring enhanced protection against such attacks.

Affected Version(s)

iOS and iPadOS 0 < 26.7.2

iOS and iPadOS 0 < 27.2

macOS 0 < 15.8.2

References

https://support.apple.com/en-us/149227

https://support.apple.com/en-us/149230

https://support.apple.com/en-us/149521

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Oct 19, 2026

CVE-2026-112656 Data

JSON