A null pointer dereference can lead to a denial‑of‑service condition. The flaw was triggered by inadequate input validation, allowing an attacker to cause a crash in the affected operating systems. This weakness is identified as CWE‑476 and, while it does not grant code execution, it disrupts device operation until a reboot or an update is applied.

Apple releases of iOS, iPadOS and macOS are vulnerable until specific patches are installed. On iOS, the flaw was fixed in version 18.3. iPadOS requires upgrade to 18.3 or 17.7.6. macOS users should update to Sequoia 15.3, Sonoma 14.7.5, or Ventura 13.7.5 to eliminate the issue.

The CVSS score of 7.5 indicates a high severity threat with a considerable impact on availability. The EPSS score of less than 1% suggests low current exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. Because the attack vector is local network, an adversary that can reach a device on the same network may trigger a crash, leading to temporary downtime of user applications and services.