CoreGraphics · PDF shading
The generator and fix analysis offer a useful hypothesis to reproduce. Raw crash reports are withheld, and the exact CVE mapping remains tentative.
Held from the main register. Raw crash evidence withheld; CVE assignment remains tentative.
- Capability
- Pointer corruption reported
- Device & build
- Reported iPhone 16e, iOS 27.0 RC (24A435)
- Primary artifact
- Source + analysis
- Published
- Reviewed
Observed
- The repository provides a PDF generator, a benign control, and comparisons of pre-fix and fixed disassembly.
- The author reports repeated Preview crashes with a file-selected value appearing in the corrupted pointer. Raw crash reports are withheld.
- The separate CMap route in the same repository did not work through the tested vehicle.
Assessment
If independently reproduced, the reported value fingerprint would support more meaningful input influence than an unexplained crash. The published material is worth investigating, with its evidence limits kept visible.
Limits
- The mapping between CVE-2026-112611 and CVE-2026-112610 is explicitly tentative.
- Fixed-device behavior was assessed statically, not demonstrated in the supplied on-device run.
- This is not evidence of two working exploits, code execution, or a jailbreak.