CVE-2026-113943

Received Received - Intake

Out-of-Bounds Write in macOS Golden Gate

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: Apple Inc.

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-26

Last Modified

2026-10-26

Generated

2026-10-27

AI Q&A

2026-10-27

EPSS Evaluated

N/A

NVD

CVE-2026-113943

EUVD

EUVD-2026-110171

Affected Vendors & Products

Vendor	Product	Version / Range
Apple	macOS	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in macOS Golden Gate 27.2. It occurs when mounting a maliciously crafted disk image, which may lead to unexpected system termination or kernel memory corruption due to insufficient bounds checking.

Detection Guidance

This vulnerability involves an out-of-bounds write issue in macOS Golden Gate 27.2 related to disk image mounting. Detection may require monitoring for system crashes or kernel memory corruption during disk image operations. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could cause your system to crash or become unstable. It may also allow attackers to corrupt kernel memory, potentially leading to unauthorized access or further system compromise.

Mitigation Strategies

Update macOS Golden Gate to version 27.2 or later to address the out-of-bounds write issue. Avoid mounting untrusted or maliciously crafted disk images until the update is applied.

Hi! I’m here to help you understand CVE-2026-113943. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70