---
id: CVE-2026-113906
title: A null pointer dereference was addressed with improved validation
summary: >-
  A null pointer dereference was addressed with improved validation. This issue
  is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An
  attacker in physical proximity may be able to cause a denial-of-service.
severity: none
vendor: Apple
product: iOS and iPadOS
affected:
  - ios_and_ipados < 26.7.2
  - ios_and_ipados < 27.2
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T20:35:27.000Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-113906'
references:
  - url: 'https://support.apple.com/en-us/149227'
  - url: 'https://support.apple.com/en-us/149230'
tags:
  - cve.org
ingestedAt: '2026-10-26T20:39:42.532Z'
epss: 0.00155
epssPercentile: 0.04578
---

## Overview

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.

## Affected

- `ios_and_ipados < 26.7.2`
- `ios_and_ipados < 27.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.