Technical impact
An integer overflow could allow an application to cause an unexpected system termination, effectively crashing the operating system. Based on the description, it is inferred that the overflow occurs during unchecked arithmetic operations within the system, which could be triggered by crafted input. The weakness is a classic unchecked arithmetic overflow, leading to resource exhaustion or failure state. The incident could compromise the integrity and availability of the affected device, but there is no indication of remote code execution or data disclosure.
Affected Systems
Apple’s iOS, iPadOS, and macOS operating systems are impacted. The affected releases include iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5.
Risk and Exploitability
The EPSS score is < 1% and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, suggesting limited current exploitation evidence. The risk remains moderate due to the potential for local applications to trigger the overflow and crash the system. Based on the description, it is inferred that attackers would need to supply crafted input to the vulnerable component; the exact attack path is not fully detailed in the advisory, but the impact is clear as a denial of service through unexpected termination. The CVSS score of 7.5 indicates a high severity, but the overall risk remains moderate due to the low exploitation probability and the local nature of the vulnerability.
