The vulnerability is an out-of-bounds write in Apple operating systems that is triggered by processing a maliciously crafted file, permitting arbitrary code execution on the affected device. It is a memory corruption weakness matching CWE-787. The description also notes reports of exceptionally sophisticated attacks targeting specific individuals on older iOS releases before iOS 27, indicating real-world exploitation.

Apple iOS and iPadOS devices running any version before iOS 18.7.11, iOS 26.7.1, iPadOS 18.7.11, or iPadOS 26.7.1 are vulnerable, as are macOS users on Sequoia 15 prior to 15.8.1 and on Tahoe 26.7.1 prior to 26.7.1. The flaw is patched in iOS 18.7.11, iPadOS 18.7.11, iOS 26.7.1, iPadOS 26.7.1, macOS Sequoia 15.8.1, and macOS Tahoe 26.7.1.

The vulnerability has a high exploitation potential, and its EPSS score of 26% indicates a high probability of exploitation. The CVSS score of 8.8 indicates a high severity. It is listed in the CISA KEV catalog. Attackers would need to deliver a malicious file to the device; once a target opens or processes that file, they could execute code without additional credentials. The absence of widespread public exploitation evidence suggests the threat may be limited to targeted attacks, yet the high severity warrants urgent remediation.