Apple Ipados: out-of-bounds write

At a glance

Apple Ipados: Amber, patch this week. A memory corruption issue was addressed with improved memory handling. An attacker could cause an unexpected app termination or arbitrary code execution by parsing a file.

The flaws

• CVE-2026-112485: Out-of-bounds write (CVSS 7.8 · EPSS 0%)
• CVE-2026-112688: Memory corruption can lead to remote code execution (CVSS 8.8 · EPSS 1%)
• CVE-2026-112671: Denial of service (CVSS 7.5 · EPSS 1%)
• CVE-2026-112476: Out-of-bounds read (CVSS 7.5 · EPSS 1%)

The fix

Fix: Check the linked advisory for the concrete fix, as it is not specified in the record.

Who is exposed: {'products': ['iOS', 'iPadOS', 'macOS Golden Gate', 'macOS Sequoia', 'macOS Tahoe'], 'packages': [], 'versions': ['iOS 26.7', 'iPadOS 26.7', 'iOS 27.2', 'iPadOS 27.2', 'macOS Golden Gate 27.2', 'macOS Sequoia 15.8.2', 'macOS Tahoe 26.7.2']}

Where it stands

• No known exploitation

Connects to

• Same weakness: Out-of-bounds write (CWE-787). 399 other warnings in 30 days
• Same product: Earlier Apple Ipados warnings. 127 in the last 90 days