CVE-2026-111133 is an integer underflow in libyal's libfsapfs, an open-source APFS image parsing library. A crafted APFS image can trigger a heap out-of-bounds read, crashing forensic tools that parse it before password checks. Versions through 20260921 are affected. No in-the-wild exploitation is confirmed. No fixed release is named yet. https://www.cve.org/CVERecord?id=CVE-2026-111133 #infosec #cybersecurity