A stack overflow was caused by insufficient validation of data received over Bluetooth. An attacker who has a paired Bluetooth device can trigger the overflow, leading to execution of arbitrary code on the target system. This flaw originates from improper handling of buffer boundaries and can compromise system confidentiality, integrity and availability.

Apple iOS 26.7 and later, iOS 27; iPadOS 26.7 and later, iPadOS 27; macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7; visionOS 27. These versions include the fix for the stack overflow. Earlier releases of each product are affected.

The EPSS score is < 1% and the CVSS score is 8.8, indicating a very low but nonzero probability of exploitation with high severity. The vulnerability is not listed in the CISA KEV catalog. A stack overflow that can be triggered by a paired Bluetooth device represents a high exploitation risk. Attackers can achieve arbitrary code execution by exploiting the overflow without additional authentication, so the risk remains significant even with small EPSS.