This vulnerability involves an out-of-bounds access flaw in Apple iOS and iPadOS that could be triggered by a malicious app to cause the system to terminate unexpectedly or to corrupt kernel memory. Apple fixed the issue by improving bounds checking in iOS 27 and iPadOS 27, as well as in other Apple operating systems like macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27. The vulnerability affects all versions prior to 27.

An attacker with the ability to run a malicious app on the affected devices could cause unexpected system termination or kernel memory corruption, potentially leading to system instability or denial of service. There is no indication of privilege escalation or arbitrary code execution from the provided data. No known exploits in the wild have been reported.

Apply the official update to iOS 27 or later and iPadOS 27 or later, which contain the fix with improved bounds checking. Devices running earlier versions remain vulnerable until updated. No other mitigations are specified.