p PatchFirst

CVE-2026-113906

CVE-2026-113906

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.

Fix available

Published
Updated

Affected products and versions

  • ios and ipados

    Versions
    • ≥ 0, < 26.7.2: Affected (custom)
    • ≥ 0, < 27.2: Affected (custom)

    Update to 26.7.2

Original sources

Check your server →