The vulnerability is a double‑free issue that, if exploited, can cause an application or the system to terminate unexpectedly. This memory‑management flaw allows an attacker to free a single memory block twice and then trigger a failed access. The result is a denial‑of‑service condition where the device may crash or reboot. The flaw is classified as CWE‑415, double free or corruption.

Affected products are Apple operating systems. Version ranges that contain the bug include iOS when older than 18.6, iPadOS when older than 18.6 or 17.7.9, macOS older than Sequoia 15.6, Sonoma 14.7.7, or Ventura 13.7.7, tvOS older than 18.6, visionOS older than 2.6, and watchOS older than 11.6. Devices running any of these unsupported releases are susceptible.

The CVSS score of 5.5 indicates medium severity, and the EPSS score of less than 1% suggests a low exploitation likelihood. The vulnerability is not listed in CISA KEV. The likely attack vector is via a malicious or compromised application that can invoke the faulty memory operation; based on the description, it is inferred that an attacker would need to either execute code in the context of the vulnerable process or supply a specially crafted payload to trigger the double free. This means the risk is primarily scoped to the local device; remote exploitation is not directly supported by the given data.