CVE-2026-112656 - Vulnerability Details - OpenCVE

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149522
https://support.apple.com/en-us/149523
https://support.apple.com/en-us/149524
https://support.apple.com/en-us/149525
https://support.apple.com/en-us/149526

History

Mon, 26 Oct 2026 21:00:00 +0000

Type	Values Removed	Values Added
Description		An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory.
References		https://support.apple.com/en-us/149227 https://support.apple.com/en-us/149230 https://support.apple.com/en-us/149521 https://support.apple.com/en-us/149522 https://support.apple.com/en-us/149523 https://support.apple.com/en-us/149524 https://support.apple.com/en-us/149525 https://support.apple.com/en-us/149526

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-10-26T20:41:42.359Z

Updated: 2026-10-26T20:41:42.359Z

Reserved: 2026-10-19T17:05:24.039Z

Link: CVE-2026-112656

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-26T21:17:59.180

Modified: 2026-10-26T21:17:59.180

Link: CVE-2026-112656

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-112656", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "state": "PUBLISHED", "assignerShortName": "apple", "dateReserved": "2026-10-19T17:05:24.039Z", "datePublished": "2026-10-26T20:41:42.359Z", "dateUpdated": "2026-10-26T20:41:42.359Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "Processing a maliciously crafted font may result in the disclosure of process memory"}]}], "affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"version": "0", "status": "affected", "lessThan": "26.7.2", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "27.2", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"version": "0", "status": "affected", "lessThan": "15.8.2", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "26.7.2", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "27.2", "versionType": "custom"}]}, {"vendor": "Apple", "product": "tvOS", "versions": [{"version": "0", "status": "affected", "lessThan": "27.2", "versionType": "custom"}]}, {"vendor": "Apple", "product": "visionOS", "versions": [{"version": "0", "status": "affected", "lessThan": "27.2", "versionType": "custom"}]}, {"vendor": "Apple", "product": "watchOS", "versions": [{"version": "0", "status": "affected", "lessThan": "27.2", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory."}], "references": [{"url": "https://support.apple.com/en-us/149227"}, {"url": "https://support.apple.com/en-us/149230"}, {"url": "https://support.apple.com/en-us/149521"}, {"url": "https://support.apple.com/en-us/149522"}, {"url": "https://support.apple.com/en-us/149523"}, {"url": "https://support.apple.com/en-us/149524"}, {"url": "https://support.apple.com/en-us/149525"}, {"url": "https://support.apple.com/en-us/149526"}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2026-10-26T20:41:42.359Z"}}}}

{"affected": [{"affectedData": [{"product": "iOS and iPadOS", "vendor": "Apple", "versions": [{"lessThan": "26.7.2", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "27.2", "status": "affected", "version": "0", "versionType": "custom"}]}, {"product": "macOS", "vendor": "Apple", "versions": [{"lessThan": "15.8.2", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "26.7.2", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "27.2", "status": "affected", "version": "0", "versionType": "custom"}]}, {"product": "tvOS", "vendor": "Apple", "versions": [{"lessThan": "27.2", "status": "affected", "version": "0", "versionType": "custom"}]}, {"product": "visionOS", "vendor": "Apple", "versions": [{"lessThan": "27.2", "status": "affected", "version": "0", "versionType": "custom"}]}, {"product": "watchOS", "vendor": "Apple", "versions": [{"lessThan": "27.2", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory."}], "id": "CVE-2026-112656", "lastModified": "2026-10-26T21:17:59.180", "metrics": {}, "published": "2026-10-26T21:17:59.180", "references": [{"source": "[email protected]", "url": "https://support.apple.com/en-us/149227"}, {"source": "[email protected]", "url": "https://support.apple.com/en-us/149230"}, {"source": "[email protected]", "url": "https://support.apple.com/en-us/149521"}, {"source": "[email protected]", "url": "https://support.apple.com/en-us/149522"}, {"source": "[email protected]", "url": "https://support.apple.com/en-us/149523"}, {"source": "[email protected]", "url": "https://support.apple.com/en-us/149524"}, {"source": "[email protected]", "url": "https://support.apple.com/en-us/149525"}, {"source": "[email protected]", "url": "https://support.apple.com/en-us/149526"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received"}