CVE-2026-112417
Apple Visionos: integer overflow
- Risk score
- 48/100
- CVSS
- 7.8 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 26 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
- Affected
- Apple Visionos
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
In the news
TL;DR
Apple patches 304 vulnerabilities, including CVE-2026-112417, an integer overflow in visionOS 27.2.
- CVE-2026-112417 is an integer overflow in visionOS 27.2, fixed with improved input validation.
- Processing a maliciously crafted 3D model may lead to memory corruption.
- No information is available on exploitation in the wild.
AI summary of 1 article.
Why it is Yellow
- CVSS 7.8 high
References
Original description
An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.
Last activity 26 Oct 2026. Patch Forecast updates every hour.