An out-of-bounds write flaw exists in several Apple operating systems where the system performs insufficient bounds checking on a memory region. The flaw can be triggered by an attacker who has physical proximity to the device, resulting in memory corruption that may cause the operating system or an application to crash. The primary impact is a local denial of service for the user, as the affected system cannot guarantee continued operation.

Apple products running iOS, iPadOS, macOS Golden Gate, tvOS, visionOS, or watchOS before version 27 are affected. The fix is incorporated in version 27 of each platform.

Due to the requirement of physical proximity and the limitation to local denial of service, widespread impact is constrained. The CVSS score is 4.6, and the EPSS score is < 1%. The vulnerability is not listed in the CISA KEV catalog. The exploit path is local; an attacker would need to be near the device to trigger memory corruption. No publicly disclosed exploits are reported, indicating a low probability of exploitation in the wild.