The vulnerability is an out‑of‑bounds write that occurs when a maliciously crafted audio stream is processed. The issue was addressed with improved bounds checking in newer releases, but older iOS, iPadOS, macOS, tvOS, visionOS, and watchOS builds still suffer from insufficient bounds verification, which allows a write beyond the intended memory buffer. This corruption can terminate the application process and manifest as a denial of service.

Apple devices running iOS, iPadOS, macOS, tvOS, visionOS, and watchOS with build versions older than the releases that contain the fix—iOS 18.7.10, iOS 26.6, iPadOS 18.7.10, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6—are susceptible. The issue can also affect any older builds of these operating systems that process maliciously crafted audio streams, leading to a process crash. Upgrading to a version that includes the updated bounds checking removes the vulnerability.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of <1% suggests a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Since the flaw primarily causes application termination rather than privilege escalation or data disclosure, the risk to confidentiality or integrity is low. Attackers would need to supply or otherwise trick the affected device into handling a malicious audio file, which could be achieved through local or remote media delivery in certain apps. Automated or targeted disruption is possible, so organizations should apply the patch promptly. Once deployed, the corrected bounds checks prevent the out-of-bounds write from occurring, eliminating the crash vector.