Out-of-Bounds Write Vulnerability in Apple iOS and macOS Products
CVE-2026-112705
What is CVE-2026-112705?
An out-of-bounds write vulnerability has been identified in various Apple operating systems, potentially allowing an application to execute code beyond its allocated memory space. This could lead to unexpected behaviors, including system instability and termination of the service. Apple has addressed this issue by enhancing bounds checking in the affected versions, ensuring that apps operate within their intended memory limits. Users are encouraged to update their devices to the latest versions to mitigate this risk.
Affected Version(s)
iOS and iPadOS 0 < 26.7.2
iOS and iPadOS 0 < 27.2
macOS 0 < 15.8.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.