This vulnerability (CVE-2026-28941) affects Apple iOS and iPadOS platforms and involves processing a maliciously crafted file that may lead to denial-of-service or memory disclosure. The root cause is related to improper input validation or memory handling (CWE-119). Apple has fixed the issue by implementing improved checks in specific versions of iOS, iPadOS, and macOS. The CVSS 3.1 base score is 7.1, with attack vector network, low attack complexity, no privileges required, user interaction required, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact. No known exploits have been reported. The patch or remediation level is not explicitly stated in the provided data, so users should consult the official Apple advisory for confirmation.

Successful exploitation may cause a denial-of-service condition or potentially disclose memory contents on affected Apple devices running iOS or iPadOS. This could impact system availability and confidentiality of memory data. No integrity impact is indicated. The vulnerability requires user interaction and can be exploited remotely over the network.

Apple has addressed this vulnerability with improved checks in iOS 18.7.9 and iPadOS 18.7.9, as well as macOS Sequoia 15.7.7 and macOS Tahoe 26.5. Users and administrators should apply these updates to remediate the issue. Patch status is not explicitly confirmed in the provided data; therefore, verify the latest vendor advisory for current remediation guidance before taking action.