The vulnerability is a double free flaw that undermines memory management. When improperly coded or malicious applications trigger the flaw, the operating system may terminate unexpectedly, resulting in a denial‑of‑service condition. The weakness is identified as CWE‑415 and primarily impacts system availability rather than enabling code execution.

Apple iPadOS and macOS are affected. Vulnerable builds include any iPadOS version prior to 17.7.7, macOS Sequoia prior to 15.5, macOS Sonoma prior to 14.7.6, and macOS Ventura prior to 13.7.6. The issue is resolved in the listed patch releases and later.

The CVSS score of 6.5 indicates moderate severity, and the EPSS score of less than 1% reflects a low current exploitation likelihood. The vulnerability is not listed in CISA’s KEV catalog, suggesting no widely documented active exploits. Exploitation would likely require the attacker to deliver or induce the targeted application to run locally, and may not be remotely exploitable without such a vector.