This vulnerability (CVE-2026-43812) involves a use-after-free condition in Apple iOS and iPadOS that may allow a malicious app to cause unexpected system termination. The issue was resolved by Apple through improved memory management and is fixed in iOS 26.6 and iPadOS 26.6, along with macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

An attacker controlling a malicious app could exploit this use-after-free vulnerability to cause unexpected system termination, leading to denial of service and potential disruption of device availability. The vulnerability affects core Apple operating systems and could impact device stability and security.

A fix is available and has been released by Apple in iOS 26.6 and iPadOS 26.6, as well as other related OS versions. Users and administrators should update affected devices to these versions or later to remediate this vulnerability. No additional mitigation guidance is provided or necessary beyond applying the official update.