Impact
An out‑of‑bounds write flaw has been identified in several Apple operating systems. Although the exact payload and trigger are not detailed in the advisory, a remote attacker could exploit the vulnerability to corrupt memory and cause the system to terminate unexpectedly. The vulnerability has been addressed by adding bounds checks to the relevant code path. The impact is negative to all affected users, potentially leading to loss of availability and disruption of services.
Affected Systems
The affected products are Apple iOS, iPadOS, macOS (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6), tvOS, visionOS and watchOS. All referenced Apple platforms with the listed versions contain the vulnerability, and the patch is included in the latest major releases for each OS.
Risk and Exploitability
The advisory reports a CVSS score of 9.8 and an EPSS probability of 0.0057, yet the vulnerability is not listed in the CISA KEV catalog. Because the flaw can trigger a system crash, the potential impact is high for any device that can be reached by an attacker. No publicly available exploits are reported, but the lack of defensive controls in the vulnerable code means that exploitation could be straightforward for a skilled adversary who can deliver a crafted payload. The risk remains significant until the device firmware or operating system is updated to the fixed version.
OpenCVE Enrichment