This vulnerability involves a buffer overflow in Apple iOS and iPadOS that can be triggered by a malicious accessory, leading to unexpected termination of applications. The flaw was mitigated by improved bounds checking in the affected operating systems. The fix is included in iOS 26.5.2 and iPadOS 26.5.2, as well as updates to other Apple platforms. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

A malicious accessory connected to an affected device may cause applications to terminate unexpectedly, potentially disrupting normal device operation and leading to denial of service. The vulnerability affects confidentiality, integrity, and availability of the system due to the buffer overflow nature of the flaw.

A fix is available in iOS 26.5.2 and iPadOS 26.5.2. Users and administrators should update affected devices to these versions or later to remediate the vulnerability. No additional mitigation guidance is provided or required beyond applying the official update.