This vulnerability (CVE-2025-24154) is caused by an out-of-bounds write in Apple iOS and iPadOS kernel components, which was remediated by improved input validation. Successful exploitation could lead to unexpected system termination or kernel memory corruption, potentially impacting system stability and integrity. The issue affects iOS and iPadOS versions prior to 18.3. Apple has released fixes in iOS 18.3, iPadOS 18.3, and corresponding macOS updates. The CVSS 3.1 base score is 9.1, reflecting network attack vector, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but high integrity and availability impacts.

An attacker exploiting this vulnerability could cause the affected device to crash unexpectedly or corrupt kernel memory, which may lead to denial of service or potentially enable further attacks compromising system integrity. There is no indication of confidentiality impact. No known exploits are currently reported in the wild.

Apple has released official fixes for this vulnerability in iOS 18.3 and iPadOS 18.3. Users and administrators should apply these updates promptly to remediate the issue. Since this is not a cloud service, patching the affected devices is required. Patch status is confirmed by the vendor advisory stating the issue is fixed in these versions.