Apple iOS and iPadOS Multi-Touch Component Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Multi-Touch component of Apple iOS and iPadOS. This issue, present in iOS 26.0 and iPadOS 26.0, allows a malicious Human Interface Device (HID) to cause an unexpected process crash. The vulnerability arises from inadequate bounds checks, which can be exploited by sending crafted input through a connected HID device.

Impact

Exploitation of this vulnerability leads to an unexpected process crash, causing a denial-of-service condition on the affected device.

Remediation

Users can update to iOS 26.1 or iPadOS 26.1 to address this vulnerability.