CVE-2026-112454
The issue was addressed with improved memory handling
- Risk score
- 56/100
- CVSS
- 8.2 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 26 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
In the news
TL;DR
Apple patches 304 vulnerabilities, including CVE-2026-112454, which affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
- CVE-2026-112454 fixed in iOS 27.2 and other OS versions
- Processing malicious video file may cause app termination or memory corruption
- CVSS score is 8.2, indicating high severity
AI summary of 1 article.
Why it is Yellow
- CVSS 8.2 high
- Remotely exploitable without logging in
References
Original description
The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
Last activity 26 Oct 2026. Patch Forecast updates every hour.