A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.
History

Tue, 27 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
Title Null Pointer Dereference Allowing Device Crash
First Time appeared Apple
Apple ios And Ipados
Weaknesses CWE-476
Vendors & Products Apple
Apple ios And Ipados

Mon, 26 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
Description A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2026-10-26T20:35:27.000Z

Updated: 2026-10-26T20:35:27.000Z

Reserved: 2026-10-20T21:06:55.476Z

Link: CVE-2026-113906

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-26T21:18:07.583

Modified: 2026-10-27T14:53:24.677

Link: CVE-2026-113906

cve-icon Redhat

No data.