The vulnerability is a use‑after‑free flaw that was addressed with improved memory management. The issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. An app may be able to cause unexpected system termination. This use‑after‑free flaw allows a malicious application to trigger a crash, resulting in a denial of service on the affected devices.

Apple products affected by the flaw include iOS, iPadOS, macOS (Sequoia 15.7.8 and Tahoe 26.6), tvOS, and visionOS. The advisory lists fixes in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6, so any version prior to those is considered vulnerable.

The EPSS score is < 1 %, indicating a very low exploitation probability, and the vulnerability is not listed in the CISA KEV catalog, so no public exploitation is known at this time. The likely attack vector requires a malicious application or script that can access free memory on the target device; local installation is inferred as a prerequisite. Because a patch has been released, the practical risk is mitigated for devices that apply the update, and the exposure may be considered low if the device is kept up to date.