An integer overflow flaw exists in input validation routines on Apple operating systems, allowing a local network attacker to trigger a denial‑of‑service condition. The weakness, classified as CWE‑190, leads to untrusted data being processed without proper bounds checking, which can cause the system to crash or become unresponsive. The impact is limited to the affected device and would not result in remote code execution or data exfiltration, but would deny legitimate users access to the device.

Apple iOS versions older than 18.4, iPadOS versions older than 18.4 or older than 17.7.6, macOS Sequoia versions older than 15.4, macOS Sonoma versions older than 14.7.5, tvOS versions older than 18.4, visionOS versions older than 2.4, and watchOS versions older than 11.4 are affected.

The CVSS score of 6.5 categorizes the vulnerability as medium severity, while an EPSS score of less than 1% indicates a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, suggesting no known widespread exploitation. Attackers would need local network access to the device, implying that segmenting networks and restricting local traffic can reduce risk. Exploitation would cause a local device crash or reboot, observable as a sudden loss of service.