This vulnerability (CVE-2025-46304) involves a denial-of-service condition triggered by a malicious HID device that causes unexpected process crashes on Apple iOS and iPadOS. The root cause is inadequate bounds checking in the handling of HID input, which could be exploited remotely with user interaction. The issue is tracked under CWE-400 (Uncontrolled Resource Consumption). Apple has addressed this vulnerability by improving bounds checks in the affected operating systems, releasing patches in iOS 18.7.5, iPadOS 18.7.5, and other Apple OS versions.

The vulnerability can cause denial of service by crashing processes unexpectedly, impacting system availability. There is no impact on confidentiality or integrity. No known exploits are reported in the wild, reducing immediate risk. The CVSS score of 5.7 reflects a medium severity with network attack vector, low attack complexity, no privileges required, and user interaction needed.

Apple has released official patches fixing this vulnerability in iOS 18.7.5, iPadOS 18.7.5, and corresponding versions of macOS, tvOS, visionOS, and watchOS. Users and administrators should apply these updates promptly to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.