Apple MobileStorageMounter Type Confusion Vulnerability Leading to Denial-of-Service

A type confusion vulnerability has been identified in the Apple MobileStorageMounter component, available on iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. This vulnerability allows an application to cause a denial-of-service by exploiting the type confusion issue, which has been addressed with improved memory handling. The vulnerability is also present in macOS Sonoma 14.8, macOS Sequoia 15.7, and watchOS 26.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing unexpected termination of the application or corruption of process memory.