This vulnerability (CVE-2026-64724) involves a denial-of-service condition caused by improper memory handling in Apple iOS and iPadOS. An attacker positioned on the local network could exploit this flaw to cause the affected device to become unresponsive or crash. Apple has fixed the issue in iOS 26.6 and iPadOS 26.6, as well as in related Apple operating systems. The CVSS score is 5.5 (medium), reflecting local network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no impact on confidentiality or integrity, and high impact on availability.

Exploitation of this vulnerability allows an attacker on the local network to cause a denial-of-service, impacting the availability of the affected Apple devices. There is no impact on confidentiality or integrity of data. No known exploits are currently reported in the wild.

A fix is available and has been released by Apple in iOS 26.6 and iPadOS 26.6. Users and administrators should update affected devices to these versions or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.