PT-2026-125279
CVE-2026-112621
·
Published
2026-10-26
·
Updated
2026-10-30
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 27.2
iOS versions prior to 26.7.2
iPadOS versions prior to 26.7.2
iOS versions prior to 27.2
iPadOS versions prior to 27.2
macOS Golden Gate versions prior to 27.2
visionOS versions prior to 27.2
Description
An out-of-bounds write issue exists in the LinkPresentation component where processing a maliciously crafted HEIC image can trigger memory corruption. This occurs due to insufficient bounds checking during image processing.
Recommendations
Update Safari to version 27.2.
Update iOS to version 26.7.2 or 27.2.
Update iPadOS to version 26.7.2 or 27.2.
Update macOS Golden Gate to version 27.2.
Update visionOS to version 27.2.
Found an issue in the description? Have something to add? Feel free to write us 👾