An attacker who is within close physical proximity to an Apple device can trigger a memory corruption flaw caused by improper handling of buffer boundaries in the operating system’s memory routines. This flaw aligns with CWE‑119 and can lead to corrupted process memory, potentially causing application crashes, instability, or unintended behavior. Although the description does not state that arbitrary code execution is possible, compromising memory integrity can undermine system reliability and expose the device to further attacks if an attacker can manipulate execution flow after the corruption occurs.

Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS devices that are running any software version prior to 26.6 are vulnerable, as the issue is fixed only in the 26.6 releases of each operating system.

The CVSS score of 9.8 indicates a high severity vulnerability, yet the EPSS score is less than 1 % and the vulnerability is not listed in the CISA KEV catalog, suggesting a low expected exploitation probability under normal conditions. The attack vector requires physical proximity, so an attacker must be near the device to trigger the memory corruption. No publicly documented exploit is available; however, high severity memory corruption flaws are generally considered high risk due to their potential to destabilize applications and enable further attacks.