An attacker who can read and write arbitrary memory can bypass the pointer authentication mechanism that protects code execution paths on Apple operating systems. This flaw allows the attacker to modify or execute code segments that would normally be protected, potentially enabling the compromise of system integrity and confidentiality. The vulnerability is coded as CWE-1220, indicating a pointer authentication bypass. Based on the description, the likely attack vector requires that the attacker first obtain arbitrary memory read/write capability, which is inferred since the vulnerability explicitly states that such capability is necessary for the bypass.

The software flaw is present in Apple’s iOS, iPadOS, macOS Sequoia, tvOS, and visionOS releases prior to iOS 18.4.1, iPadOS 18.4.1, macOS 15.4.1, tvOS 18.4.1, and visionOS 2.4.1. Devices running these earlier versions remain susceptible to exploitation.

The CVSS score of 9.8 classifies the vulnerability as critical, while the EPSS score of 15% indicates a moderate probability that it will be actively exploited. The flaw is cataloged in the CISA KEV list, and reports suggest that it may have been leveraged in a targeted, highly sophisticated attack against certain users on iOS. Because arbitrary memory read/write is required, the attack typically depends on a prior vulnerability that grants such capabilities, which reduces the overall threat distance. Based on the description, the likely attack vector is inferred to involve an initial compromise that provides arbitrary memory access before attempting the pointer authentication bypass.