This vulnerability involves a buffer overflow in Apple iOS and iPadOS that allows a local user to potentially cause a denial of service via unexpected system termination or to read kernel memory, which could lead to information disclosure. The flaw was mitigated by improved input validation and fixed in iOS 18.7.9, iPadOS 18.7.9, and other Apple OS versions. The CVSS score of 6.2 indicates a medium severity with local attack vector and low attack complexity. No vendor advisory explicitly states the patch status beyond the version fixes mentioned.

A local attacker could exploit this vulnerability to cause the system to crash unexpectedly or to read sensitive kernel memory, potentially leading to denial of service or information disclosure. The impact does not include privilege escalation or remote exploitation based on the available data.

The vulnerability is fixed in iOS 18.7.9, iPadOS 18.7.9, and corresponding versions of other Apple operating systems. Users and administrators should update affected devices to these versions or later to remediate the issue. Patch status is inferred from the fixed versions mentioned; check the official Apple security advisories for confirmation and further guidance.