This vulnerability (CVE-2026-43653) affects Apple iOS and iPadOS and is caused by improper memory handling that can be triggered by an attacker on the local network to cause a denial-of-service condition. The issue has been addressed by Apple with improved memory handling and fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, and tvOS 26.5. The CVSS v3.1 base score is 6.2, reflecting a medium severity with attack vector local network, low attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact but no integrity or availability impact according to the vector. However, the description states denial-of-service impact, which affects availability. No known exploits are reported in the wild. No vendor advisory or patch links were provided in the input, but the fixed versions are explicitly stated.

An attacker on the local network can exploit this vulnerability to cause a denial-of-service condition on affected Apple devices running vulnerable versions of iOS and iPadOS. This impacts the availability of the device or service. There is no indication of confidentiality or integrity compromise beyond what is stated in the CVSS vector. No known exploits in the wild have been reported.

The vulnerability has been fixed by Apple in iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, and tvOS 26.5. Users and administrators should update to these versions or later to remediate this issue. Patch status is confirmed by the vendor's fixed version information. No additional mitigation guidance is provided or required.