An out-of-bounds read was discovered in several Apple operating systems, allowing an attacker located in wireless proximity to trigger unexpected system termination. The flaw arises from insufficient bounds checking, resulting in a read beyond valid memory boundaries that can destabilize the operating system. This can cause a denial of service, where the device becomes non‑responsive or crashes, without directly exposing confidential data or providing arbitrary code execution.

Apple iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 are all affected. Apple released fixes that include improved bounds checking in each of these released versions.

The vulnerability requires the attacker to be in wireless proximity, implying a local wireless threat, which may limit the attack surface. The EPSS score is very low, below 1%, and the flaw is not listed in the CISA KEV catalog, indicating no known active exploitation at this time. Nevertheless, the denial of service nature of the flaw still warrants timely remediation, especially for devices used in high-availability environments.