Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Apple devices may leak memory when viewing malicious image

CVE-2026-112560 · published 9 days ago
Summary

iOS, iPadOS, macOS, tvOS, visionOS and watchOS can expose parts of a device's memory if a specially crafted picture is opened. The problem has been corrected in the latest updates for each platform. Install the recent system updates to protect your devices.

What to do
  • Update apple ios and ipados to version 26.7.2 or later.
  • Update apple macos to version 15.8.2 or later.
  • Update apple tvos to version 27.2 or later.
  • Update apple visionos to version 27.2 or later.
  • Update apple watchos to version 27.2 or later.
Affected software
VendorProductAffected versions
apple ios and ipados < 26.7.2
apple macos < 15.8.2
apple tvos < 27.2
apple visionos < 27.2
apple watchos < 27.2
Original advisory text
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 2...
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published26 Oct 2026
Updated4 Nov 2026
First seen26 Oct 2026
Sources
CVE-2026-112560 · NVD
CVE-2026-112560 · MITRE
Track software like this
Free during beta