This vulnerability involves a memory corruption issue triggered by processing specially crafted video files on Apple iOS and iPadOS devices. The flaw can lead to unexpected app termination, indicating a potential denial of service or stability impact. Apple fixed the issue by improving memory handling in iOS 26.6 and iPadOS 26.6, as well as in related Apple OS versions. The CVSS vector indicates local attack vector with low complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

Successful exploitation can cause unexpected termination of applications processing malicious video files, potentially leading to denial of service and possible compromise of confidentiality and integrity due to memory corruption. The CVSS score of 7.8 reflects high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported.

Apple has released official fixes in iOS 26.6 and iPadOS 26.6 to address this vulnerability. Users and administrators should update affected devices to these versions or later to mitigate the risk. No additional mitigation steps are indicated beyond applying the official patches.