Impact
A buffer overflow vulnerability was identified in Apple operating systems, where insufficient bounds checking could be leveraged by a malicious application to cause a service interruption. The flaw allows a crafted input to exceed allocated memory boundaries, leading the system to terminate unexpectedly. The issue was mitigated in subsequent releases through enhanced bounds checking, implying that exploitation requires an application to provide invalid data before the system can detect it.
Affected Systems
iOS 18.7.10, 27 and iPadOS 18.7.10, 27 on iPhone and iPad devices, alongside macOS Golden Gate 27, Sequoia 15.7.8, and Sonoma 14.8.8 on Mac computers. Devices running earlier or pre‑release versions of these operating systems remain susceptible.
Risk and Exploitability
The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation at this time. Although the CVSS score is not provided, the impact is a denial of service that does not require privilege escalation, suggesting that a locally privileged attacker or a compromised application could trigger the crash. The lack of specific exploit details advises administrators to treat the vulnerability as serious and to apply the available patches promptly.
OpenCVE Enrichment