The vulnerability is caused by insufficient input validation in Apple operating systems, allowing an application to trigger unexpected system termination or corrupt kernel memory. The description indicates that the flaw exists until the applied OS update, and that the immediate effect is an unstable or crashed system.

Apple iOS, iPadOS, and macOS Tahoe devices running versions earlier than 26.5.2 are affected. The fix is delivered in the 26.5.2 releases for each platform.

The CVSS score is not available, and the EPSS score is not provided. The vulnerability is not listed in the CISA KEV catalog. An attacker would likely need to install or run a malicious or compromised application on the target device to exploit the flaw, as indicated by the description. The risk is limited to local exploitation of the compromised application, with the potential outcome of system instability or kernel memory corruption. No evidence in the description suggests escalation of privileges or remote exploitation.