Impact
A flaw in memory initialization allows an application to access uninitialized data, which can cause the operating system to terminate unexpectedly. The vulnerability can be leveraged by a malicious app to trigger the crash, leading to repeated shutdowns or restarts and affecting availability. The weakness corresponds to improper initialization of objects, a known cause of unrecoverable failures.
Affected Systems
iOS, iPadOS, macOS (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6), tvOS, visionOS, and watchOS running a version older than the fixed releases are susceptible.
Risk and Exploitability
The issue does not expose remote code execution or data leakage; it is limited to availability. The EPSS score of less than 1% indicates a very low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local, where a malicious application on the device triggers the crash. Although the probability of exploitation is low, the high CVSS score alerts to the significant impact on device operability if targeted.
OpenCVE Enrichment