A vulnerable bounds‑check in an Apple HID driver allows an attacker to supply malicious input that overflows a buffer, causing an unexpected process crash. This flaw is a classic stack or heap buffer overflow (CWE‑119) and results in a denial‑of‑service condition for the affected process. Because the crash occurs when interacting with a hardware input device, the impact is limited to the local machine but could disrupt critical functions if the crashed process is essential.

The vulnerability affects Apple operating systems: iOS, iPadOS, and macOS. The specific affected releases are those older than iOS 26.1, iPadOS 26.1, and macOS Tahoe 26.1. No other Apple vendor or product is listed as affected. Devices running any of these operating systems with a connected HID peripheral that can transmit crafted input are potentially vulnerable.

The CVSS score of 6.5 indicates moderate severity. The EPSS score is under 1 %, indicating a very low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, and no public exploits have been reported. The likely attack vector requires physical or local access to the device to connect a malicious HID peripheral, so the overall risk is moderate but constrained. Applying the official firmware updates mitigates the issue entirely.