This vulnerability involves an out-of-bounds write condition in Apple iOS and iPadOS that could be exploited by an app to cause unexpected system termination or to write to kernel memory. The flaw was mitigated by improved input validation. The fix is included in iOS 18.7.9, iPadOS 18.7.9, and other Apple OS releases such as macOS Sequoia 15.7.7 and later versions. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and impact limited to integrity and availability.

An attacker controlling a malicious app could exploit this vulnerability to cause the affected device to crash unexpectedly or potentially corrupt kernel memory, which could lead to system instability or denial of service. There is no indication of confidentiality impact. No known exploits have been reported in the wild.

This vulnerability is fixed in iOS 18.7.9 and iPadOS 18.7.9, as well as other Apple OS versions listed in the advisory. Users and administrators should apply these official updates to remediate the issue. Since the patch is available and the vendor has released fixes, updating to the fixed versions is the recommended mitigation.