---
id: CVE-2026-112621
title: An out-of-bounds write issue was addressed with improved bounds checking
summary: >-
  An out-of-bounds write issue was addressed with improved bounds checking. This
  issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and
  iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing a maliciously
  crafted…
severity: none
vendor: Apple
product: Safari
affected:
  - Safari < 27.2
  - ios_and_ipados < 26.7.2
  - ios_and_ipados < 27.2
  - macOS < 27.2
  - visionOS < 27.2
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T20:43:05.427Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112621'
references:
  - url: 'https://support.apple.com/en-us/149227'
  - url: 'https://support.apple.com/en-us/149230'
  - url: 'https://support.apple.com/en-us/149521'
  - url: 'https://support.apple.com/en-us/149526'
  - url: 'https://support.apple.com/en-us/149527'
tags:
  - cve.org
epss: 0.00231
epssPercentile: 0.13844
ingestedAt: '2026-10-27T16:11:59.077Z'
---

## Overview

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing a maliciously crafted image may result in memory corruption.

## Affected

- `Safari < 27.2`
- `ios_and_ipados < 26.7.2`
- `ios_and_ipados < 27.2`
- `macOS < 27.2`
- `visionOS < 27.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.