MchinaMd57764/CVE-2026-112706-CoreMedia-fd-leak

CVE-2026-112706-CoreMedia-fd-leak

✅ Recently maintained

Independent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5–27.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.

21Stars
6Forks
+217-day stars

Swift · License unverified · Last push 2026-10-28

Official repository & installation ↗

GitValue · Value evidence

Unscored · Evidence coverage 0%

Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.

Star history

2026-10-242026-11-03
View historical data
DateStars
2026-10-240
2026-10-250
2026-10-260
2026-10-270
2026-10-2813
2026-10-2918
2026-10-3018
2026-10-3117
2026-11-0119
2026-11-0221
2026-11-0321

Get the project

git clone https://github.com/MchinaMd57764/CVE-2026-112706-CoreMedia-fd-leak.git

Cloning downloads the source. For dependencies and installation, follow the project README.

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.