This vulnerability (CVE-2025-24118) in Apple iPadOS involves a memory handling flaw that could allow a malicious app to cause unexpected system termination or write to kernel memory, potentially leading to system compromise. The issue is classified under CWE-787 (Out-of-bounds Write). It has a critical CVSS 3.1 base score of 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Apple addressed the issue with improved memory handling and released fixes in iPadOS 17.7.4, macOS Sequoia 15.3, and macOS Sonoma 14.7.3.

Successful exploitation could allow an attacker to cause a denial of service via unexpected system termination or potentially gain kernel-level write access, compromising system integrity and confidentiality. This could lead to full system compromise on affected devices. No known exploits are currently reported in the wild.

A fix is available from Apple. Users and administrators should update affected Apple devices to iPadOS 17.7.4 or later to remediate this vulnerability. Similarly, macOS users should apply updates to Sequoia 15.3 or Sonoma 14.7.3 as applicable. No additional mitigation steps are indicated by the vendor advisory.