This vulnerability involves a use-after-free condition in Apple iOS and iPadOS that could be triggered by a malicious app to cause unexpected system termination. Apple fixed the issue by improving memory management in iOS 26.6 and iPadOS 26.6, as well as in other Apple OS versions including macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The CVSS v3.1 score of 9.8 reflects network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

An unprivileged app could exploit this use-after-free vulnerability to cause unexpected system termination, potentially leading to denial of service and impacting system stability and availability. The vulnerability affects confidentiality and integrity as well, as indicated by the CVSS vector, though specific data exposure or modification details are not provided.

Apple has released official fixes for this vulnerability in iOS 26.6 and iPadOS 26.6, among other OS versions. Users and administrators should apply these updates promptly to remediate the issue. Patch status is confirmed by the vendor advisory stating the issue is fixed in these versions. No additional mitigation steps are indicated or required beyond applying the official updates.