CVE-2026-113950

None

CVSS

—

EPSS

0.2%

Published

Oct 26, 2026

CISA due date

—

The record

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.

Affected packages

Ecosystem	Package	Introduced	Fixed