AI description
CVE-2026-113970 is a use-after-free memory corruption vulnerability affecting the Bluetooth component in Apple devices. The flaw occurs when the system continues to reference a memory pointer after the associated object has been deallocated. An attacker positioned within physical Bluetooth range can exploit this dangling reference to corrupt process memory, which could potentially allow them to manipulate control flow, escalate privileges, or execute arbitrary code. Apple addressed the vulnerability on November 9, 2026, by implementing improved memory management practices across its operating systems. The security fix is included in several software updates, including iOS and iPadOS (versions 18.7.12, 26.7.3, and 27.2.1), macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, and watchOS (versions 26.6.1 and 27.2.1).
- Description
- A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.
- Source
- product-security@apple.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-416
- Hype score
- Not currently trending