The vulnerability is a buffer overflow (CWE-119) that can lead to corruption of kernel memory, potentially causing the system to terminate unexpectedly. An attacker may trigger this flaw by delivering crafted input that exploits improper memory handling, resulting in kernel memory corruption.

Apple devices running iOS earlier than 18.5, iPadOS earlier than 18.5 or 17.7.7, macOS versions before Sequoia 15.5, Sonoma 14.7.6, Ventura 13.7.6, tvOS before 18.5, visionOS before 2.5, and watchOS before 11.5 are vulnerable because the firmware does not include the enhanced memory safety fixes introduced in the listed newer releases.

The CVSS score of 7.1 indicates a moderate‑to‑high severity. The EPSS score below 1% suggests that exploitation in the wild is currently rare. This vulnerability is not listed in CISA's KEV catalog. The attack vector is not defined in the supplied data; it is not clear whether local or remote access is required to trigger the memory corruption, so the exact exposure remains unknown.