The vulnerability is an out‑of‑bounds write issue that was mitigated in Apple’s latest operating systems through improved bounds checking. An attacker located within the device’s radio range could trigger unexpected system termination, effectively causing a denial of service. The weakness involves an out‑of‑bounds memory write that can corrupt execution flow or program state, compromising integrity and availability of the affected systems.

Apple devices running iOS, iPadOS, macOS, tvOS, visionOS, and watchOS prior to the release of the fixed versions are affected. The vulnerability is resolved in iOS 26.7 and iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.

The CVE has an EPSS score of <1% and is not listed in the CISA KEV catalog, indicating no current evidence of widespread exploitation. The CVSS score is 6.5, indicating moderate severity. Based on the description, the attacker likely requires proximity to the device’s radio and access to the vulnerable radio protocol to exploit the flaw. The impact is a denial of service through termination of the operating system, which would affect the affected device until reboot or patching. The risk is considered moderate due to the potential for local exploitation but is mitigated by the absence of known active exploits.