An out-of-bounds write flaw was discovered in the processing of video files, resulting in improper bounds checking that can corrupt memory. The resulting crash causes the application or system to terminate unexpectedly, effectively providing a denial‑of‑service condition to the user. The weakness is catalogued as CWE‑787 and is not associated with information disclosure or code execution.

The flaw affects Apple operating systems across multiple device families, including iOS 18.7, iPadOS 18.7, iOS 26, iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, and watchOS 26. Devices running earlier or unpatched versions are vulnerable until a patch is applied.

The CVSS score of 2.8 indicates low severity, and the EPSS score of under 1 % reflects a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The most likely attack vector involves a victim opening or viewing a maliciously crafted video file locally on the device. No remote exploitation method is documented in the supplied description.