CVE-2026-113942: Input Validation

Published Oct 26, 2026

Updated

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

Other sources

Accounts. A logging issue was addressed with improved data redaction.

— Apple

Accounts. This issue was addressed with additional entitlement checks.

— Apple

AirPort. An authorization issue was addressed with improved state management.

— Apple

APFS. An out-of-bounds read was addressed with improved bounds checking.

— Apple

APFS. An out-of-bounds write issue was addressed with improved bounds checking.

— Apple

Frequently Asked Questions

Can this record be used to determine whether a particular device or software version is affected?

No. The supplied data does not identify affected product versions, release builds, or configuration conditions, so exposure cannot be determined from this record alone.

Does the available information state that exploitation is occurring or describe attacker prerequisites?

No. It does not provide exploitation status, attack vectors, required access level, or other attacker prerequisites.

Is a temporary mitigation provided for environments that cannot patch immediately?

No. The supplied information does not include a workaround, mitigation, or compensating control.

CVE-2026-113942: Input Validation

Other sources

Frequently Asked Questions

Can this record be used to determine whether a particular device or software version is affected?

Does the available information state that exploitation is occurring or describe attacker prerequisites?

Is a temporary mitigation provided for environments that cannot patch immediately?

Company

Resources

Contact

Frequently Asked Questions

Can this record be used to determine whether a particular device or software version is affected?

Does the available information state that exploitation is occurring or describe attacker prerequisites?

Is a temporary mitigation provided for environments that cannot patch immediately?