An issue with memory handling in Apple operating systems was discovered, where processing an image can lead to a denial‑of‑service. The flaw places no immediate threat of data exposure or privilege escalation; instead it can cause application or system crashes that disrupt user availability. The vulnerability is categorized as a resource exhaustion weakness, matching CWE‑770.

Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS are affected. The memory‑handling fix is included in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3 and watchOS 11.3.

The CVSS score of 5.5 indicates moderate risk, and the EPSS score of less than 1% implies low probability of current exploitation, which is further supported by its absence from the CISA KEV catalog. Attackers would need to supply crafted image data to trigger the crash, an input that could be supplied by a malicious application or a compromised service. Because the exploit does not provide remote code execution or data compromise, the main danger is to service availability. The likelihood of exploitation remains low but should not be ignored.