CVE-2026-113961: Input Validation
AirPlay. A logic issue was addressed with improved state management.
Other sources
An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker may be able to join an iMessage group chat and receive its messages.
— MITRE
App Intents. An authorization issue was addressed with improved state management.
— Apple
Bluetooth. A use-after-free issue was addressed with improved memory management.
— Apple
brotli. An out-of-bounds write issue was addressed with improved input validation.
— Apple
CoreUtils. A logic issue was addressed with improved state management.
— Apple
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 27.2.1 - Upgrade
Upgrade
iOS, iPadOS, macOS Tahoeto a version that resolves this vulnerability.Fixed in 26.7.3 - Upgrade
Upgrade
iOS, iPadOS, macOS Golden Gate, visionOS, watchOSto a version that resolves this vulnerability.Fixed in 27.2.1 - Upgrade
Upgrade
macOS Sequoiato a version that resolves this vulnerability.Fixed in 15.8.3
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.