CVE-2026-112608
CVE-2026-112608
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.
EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
ios and ipados
- Versions
- ≥ 0, < 27: Affected (custom)
Update to 27
macos
- Versions
- ≥ 0, < 27: Affected (custom)
Update to 27
tvos
- Versions
- ≥ 0, < 27: Affected (custom)
Update to 27
visionos
- Versions
- ≥ 0, < 27: Affected (custom)
Update to 27
watchos
- Versions
- ≥ 0, < 27: Affected (custom)
Update to 27