Impact
An improper write to an invalid memory region allows an application to corrupt memory and crash the system, resulting in a denial‑of‑service. The flaw stems from a boundary check that still permits an out‑of‑bounds write, causing the affected operating system to terminate unexpectedly. The impact is limited to service availability, as there is no evidence that the write leads to remote code execution or data disclosure.
Affected Systems
Vulnerable Apple operating systems include iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, tvOS, visionOS, and watchOS when the version is older than iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, or watchOS 26.6. Devices running these pre‑fixed releases can experience application or system crashes if exploited.
Risk and Exploitability
The EPSS score is reported as less than 1 % and the vulnerability is not listed in CISA KEV, indicating the likelihood of a public exploit is low. The attack vector is inferred to be a malicious or compromised application that runs with sufficient privileges to trigger the out‑of‑bounds write. While no commercial exploit is known, any app that can invoke the affected subsystem could cause a denial‑of‑service, potentially disrupting device functionality.
OpenCVE Enrichment