The vulnerability is a bounds check failure in Apple’s Keynote, iOS, iPadOS, and macOS that occurs when processing specially crafted Keynote files. It can let an attacker read arbitrary memory contents from the process handling the file, potentially exposing sensitive data such as credentials or personal information. The flaw corresponds to CWE‑125, an out‑of‑bounds read.

Affected products include Apple Keynote version 15 and earlier, iOS and iPadOS versions prior to 26, and macOS earlier than Tahoe 26. Apple has documented the issue for all four products and released fixes in the latest updates for each platform.

The CVSS score of 5.5 indicates moderate risk, and the EPSS score of less than 1% suggests that exploitation is not widespread. The flaw is not listed in the CISA KEV catalog, implying that no known campaigns target it. An attacker would need to deliver a malicious Keynote file—likely from an untrusted source—to trigger the memory disclosure. Because the vulnerability affects confidentiality only, the overall impact is limited to potential data leakage.