Impact
A use after free flaw was discovered in Apple operating systems, targeting memory management to let an application trigger unexpected system termination. This weakness falls under CWE‑416: Use After Free. The defect allows a malicious or buggy app to cause a crash, potentially disrupting service availability. No further exploitation such as unauthorized code execution is documented in the source description.
Affected Systems
Apple’s iOS, iPadOS, macOS, tvOS, visionOS, and watchOS are impacted. The flaw is fixed in iOS 18.7.7 and iPadOS 18.7.7; macOS Sequoia 15.7.5 and macOS Sonoma 14.8.5; and tvOS, visionOS, and watchOS all receive remediation in version 26.3. These releases address the memory‑safety issue that previously allowed the crash.
Risk and Exploitability
The CVSS score of 6.2 indicates moderate severity; an EPSS below 1% suggests low current exploit prevalence; and the vulnerability is not listed in the CISA KEV catalog. Attackers would need to run or entice the execution of a vulnerable application on the device, making local or potentially remote application‑based attacks the plausible threat vector. The result of successful exploitation is a loss of availability, with no evidence of further confidentiality or integrity impact.
OpenCVE Enrichment