The vulnerability is a buffer overflow caused by insufficient bounds checking during accessory communication. A malicious accessory can trigger the overflow, leading to unexpected application termination. This flaw results in a denial of service by crashing apps and potentially affecting all apps on the device. The weakness stems from unchecked memory bounds, identified as CWE-120.

Affected Apple operating systems include iOS 18.7.10, iOS 26.5.2, iPadOS 18.7.10, and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Users running these OS versions on Apple iPhones, iPads, Macs, Apple TVs, Apple Vision Pro, or Apple Watches are impacted.

The CVSS score is 9.8, indicating a critical impact. The EPSS score is less than 1%, suggesting a low probability of exploitation in the current landscape, and the vulnerability is not listed in the CISA KEV catalog. An attacker would need to provide a compromised accessory to the device; once the overflow occurs, it could cause application termination. Risk remains high pending update availability.