CVE-2026-112596

Received Received - Intake

Integer Overflow in iOS Leading to System Termination

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: Apple Inc.

Description

An integer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected system termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-26

Last Modified

2026-10-26

Generated

2026-10-27

AI Q&A

2026-10-27

EPSS Evaluated

N/A

NVD

CVE-2026-112596

EUVD

EUVD-2026-110134

Affected Vendors & Products

Vendor	Product	Version / Range
Apple	iOS and iPadOS	0
Apple	macOS	0
Apple	tvOS	0
Apple	visionOS	0
Apple	watchOS	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is an integer overflow caused by insufficient bounds checking when processing video files. It occurs in multiple Apple operating systems including iOS, macOS, tvOS, visionOS, and watchOS. The flaw allows a maliciously crafted video file to trigger unexpected system termination.

Impact Analysis

If you process a specially crafted video file on a vulnerable Apple device, the system may crash unexpectedly. This could lead to data loss or disruption of services running on the device. The impact is limited to the device processing the malicious file.

Mitigation Strategies

Update affected Apple devices to iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, or watchOS 27.2 or later to address the integer overflow issue.

Hi! I’m here to help you understand CVE-2026-112596. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70