Apple Multi-Touch Framework Memory Corruption Vulnerability Leading to Process Crash

A memory corruption vulnerability has been identified in the Multi-Touch framework of multiple Apple operating systems, including watchOS, iOS, iPadOS, macOS Tahoe, visionOS, and tvOS, all version 26.2. This vulnerability allows a malicious Human Interface Device (HID) to cause an unexpected crash of the affected process. The issue arises from inadequate input validation, which creates opportunities for memory corruption.

Impact

Exploitation of this vulnerability can lead to a process crash, causing a denial-of-service condition on the affected device.

Remediation

Users can update to the latest version of watchOS, iOS, iPadOS, macOS Tahoe, visionOS, or tvOS to address this vulnerability. Instructions for updating can be found on the Apple Support website.