This vulnerability is a use-after-free flaw (CWE-416) in Apple iOS and iPadOS that could be exploited by a malicious app to cause unexpected system termination or kernel memory corruption. Apple fixed this issue by improving memory management in iOS 26.6 and iPadOS 26.6, as well as in other Apple OS versions. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed but no known exploits have been observed in the wild. The patch status is confirmed by the vendor advisory stating the fix is included in iOS 26.6 and iPadOS 26.6.

Successful exploitation can lead to unexpected system termination (crashes) or corruption of kernel memory, potentially allowing an attacker to compromise system stability or security. The impact includes full confidentiality, integrity, and availability loss as indicated by the CVSS vector.

Apply the official security updates from Apple by upgrading to iOS 26.6 and iPadOS 26.6 or later versions. The vulnerability is fixed in these versions. No additional mitigation is required if devices are updated accordingly.