An out‑of‑bounds read in certain Apple operating systems can allow an attacker who has physical access to a locked device to read sensitive user data, leading to a privacy breach. The flaw was mitigated by adding stricter bounds checking in the affected OS releases. Since the vulnerability arises from reading memory beyond its bounds, attackers could potentially access data that should be protected, compromising user confidentiality.

Apple’s iOS and iPadOS version 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 are impacted. Devices running earlier versions of these operating systems are susceptible unless they have been updated to the listed releases.

The security risk is tied to physical possession of the device while it is locked; no known network‑based exploitation vector exists. The EPSS score is < 1%, indicating a very low but non‑zero probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, suggesting no widely documented or active exploitation. Nevertheless, attackers with access to a locked device could view private data, so the vulnerability remains significant for users who may be in environments where physical device access is possible.