A type‑confusion flaw in several Apple operating systems allows a local network attacker to trigger an unexpected application termination, resulting in a denial‑of‑service condition. The vulnerability arises from improper type validation during execution, as identified by CWE‑843, and can cause an application to crash when it encounters a maliciously crafted packet on the local network.

Affected products include Apple iOS, iPadOS, macOS, tvOS, and visionOS on the following releases: iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, and visionOS 2.3. Devices running any earlier firmware versions that lack the patch remain vulnerable.

The CVSS score of 7.5 indicates a high impact, while the EPSS score of 1% suggests that widespread exploitation is currently unlikely. The flaw requires the attacker to be on the same local network as the target device and to deliver a specially crafted packet that triggers the type‑confusion path; thus the risk is confined to environments where the device is exposed to untrusted local traffic. The vulnerability is not listed in CISA’s KEV catalog.