Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Apple devices may crash when opening malicious 3D model

CVE-2026-112485 · published 9 days ago
Summary

iOS, iPadOS, macOS, tvOS and visionOS can experience memory corruption if they process a specially crafted 3D file, which may cause the device to freeze or restart. This risk is resolved in the latest releases of those operating systems (iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2). Update your Apple devices to these versions as soon as possible.

What to do
  • Update apple ios and ipados to version 27.2 or later.
  • Update apple tvos to version 27.2 or later.
  • Update apple visionos to version 27.2 or later.
  • Update apple ipados to version 27.2 or later.
  • Update apple iphone_os to version 27.2 or later.
Affected software
VendorProductAffected versions
apple ios and ipados < 27.2
apple macos < 15.8.2
>= 15.0, < 15.8.2
>= 26.0, < 26.7.2
>= 27.0, < 27.2
apple tvos < 27.2
apple visionos < 27.2
apple ipados < 27.2
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple iphone_os < 27.2
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Original advisory text
The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. P...
The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
References
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published26 Oct 2026
Updated4 Nov 2026
First seen26 Oct 2026
Sources
CVE-2026-112485 · NVD
CVE-2026-112485 · MITRE
Track software like this
Free during beta