Is CVE-2026-112705 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-112705 being exploited in the wild.

How severe is CVE-2026-112705?

Informational severity, published 26 October 2026.

Which products and versions are affected?

Apple Ios before 26.7.2 and 27.2; Apple iPadOS before 26.7.2 and 27.2; Apple macOS Golden Gate before 27.2; Apple macOS Sequoia before 15.8.2; and 2 more.

Is there a fix for CVE-2026-112705?

Yes: fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-112705 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2026-112705?

Check whether you run Apple Ios, Apple iPadOS, Apple macOS Golden Gate or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-112705: Apple AVEVideoEncoder out-of-bounds write in video processing

CVE-2026-112705 · Severity: info · Published 2026-10-26

Apple's video encoder component processes video files across iOS, iPadOS, macOS, and tvOS. A maliciously crafted video file can trigger an out-of-bounds memory write, causing an app to crash unexpectedly. While the impact is limited to denial of service, the vulnerability affects millions of devices running affected Apple operating systems.

Technologies: Apple Ios, Apple iPadOS, Apple macOS Golden Gate, Apple macOS Sequoia, Apple Tvos. Vendors: Apple.

Quick answers

Is CVE-2026-112705 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-112705 being exploited in the wild.
How severe is CVE-2026-112705?: Informational severity, published 26 October 2026.
Which products and versions are affected?: Apple Ios before 26.7.2 and 27.2; Apple iPadOS before 26.7.2 and 27.2; Apple macOS Golden Gate before 27.2; Apple macOS Sequoia before 15.8.2; and 2 more.
Is there a fix for CVE-2026-112705?: Yes: fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-112705 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2026-112705?: Check whether you run Apple Ios, Apple iPadOS, Apple macOS Golden Gate or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2

Technical details

An out-of-bounds write vulnerability exists in the AVEVideoEncoder component due to insufficient bounds checking during video file processing. An attacker can craft a malicious video file that, when processed by the encoder, triggers memory corruption and causes unexpected app termination. The attack requires the victim to process the crafted video file but no authentication or special privileges are needed.

Affected products

Apple iOS before 26.7.2 and 27.2
Apple iPadOS before 26.7.2 and 27.2
Apple macOS Golden Gate before 27.2
Apple macOS Sequoia before 15.8.2
Apple macOS Tahoe before 26.7.2
Apple tvOS before 27.2

Timeline

2026-10-26: disclosed
2026-10-26: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.