Overview
What is CVE-2026-112417?
An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2.
Processing a maliciously crafted 3D model may lead to memory corruption.
Source: NVD
Vulnerability intelligence
CVE-2026-112417. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2.
Processing a maliciously crafted 3D model may lead to memory corruption.
Source: NVD