Technical impact
Improper memory handling in system components allows an application to write arbitrary data to kernel memory or trigger an unexpected system shutdown. This flaw is characterized as a buffer or heap overflow (CWE‑787), enabling kernel data corruption that can destabilize the operating system and potentially allow an attacker to gain control or disrupt service.
Affected Systems
Apple devices running iPadOS versions earlier than 17.7.4 and macOS installations earlier than Sequoia 15.3 or Sonoma 14.7.3 are vulnerable. Any device with those operating system versions may be exposed to the flaw if a malicious or compromised application is installed.
Risk and Exploitability
The vulnerability carries a CVSS score of 9.8 and an EPSS score of 4 %, indicating a high severity but a moderate likelihood of exploitation under current conditions. It is not listed in the CISA KEV catalog yet. Attackers would need to execute code on the local device, typically through a malicious application, to trigger the kernel write or induced termination. The impact is system-wide due to kernel memory involvement, but the vectors are confined to the device itself.
EUVD