This vulnerability involves a denial-of-service condition triggered by processing an audio stream in a maliciously crafted media file on Apple iOS and iPadOS devices. The root cause is improper memory handling, which can cause the process to terminate unexpectedly. Apple fixed the issue in iOS 18.7.9 and iPadOS 18.7.9, along with updates to other Apple operating systems. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires user interaction, but does not impact confidentiality or integrity, only availability.

Successful exploitation results in the termination of the affected process, causing a denial-of-service condition. There is no impact on confidentiality or integrity. The vulnerability does not appear to be actively exploited in the wild.

A fix is available and has been released by Apple in iOS 18.7.9 and iPadOS 18.7.9. Users and administrators should update affected devices to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.