Impact
The vulnerability arises from a flaw in the operating system’s memory handling routines. A malicious or compromised application can leverage this weakness to overwrite or corrupt kernel memory, which can result in unexpected system termination or untrusted memory manipulation. The consequence is a loss of system availability and a potential compromise of operating‑system integrity, as kernel memory corruption can alter privileged data structures.
Affected Systems
Apple iOS, iPadOS, macOS Sequoia, macOS Tahoe, and visionOS releases prior to iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, and visionOS 26.6 are affected. Devices running a version older than these patches are vulnerable until updated.
Risk and Exploitability
The issue is exploitable by any application capable of running on the device, and based on the description, it is inferred that the attack vector is local via any application. The CVSS score of 7.8 indicates moderate to high severity, and the EPSS score is < 1%, pointing to a very low but nonzero exploitation probability. The vulnerability is not listed in the CISA KEV catalog. The potential impact is a system crash or compromise of privileged data, resulting in loss of availability and integrity. Attacks would require the malicious app to be installed or executed on the device, which is likely for end‑users, making the risk significant until mitigated by patching.
OpenCVE Enrichment