Apple Multi-Touch Component Out-of-Bounds Vulnerability Leading to Process Crash

A vulnerability exists in the Multi-Touch component of Apple macOS Sequoia, iOS, and iPadOS, allowing a malicious Human Interface Device (HID) to cause an unexpected process crash. This issue is present in macOS Sequoia 15.7.4, iOS 18.7.5, iPadOS 18.7.5, and macOS Sonoma 14.8.4. The vulnerability arises from inadequate bounds checking, which can be exploited by a malicious HID device to disrupt normal process operations.

Impact

Exploitation of this vulnerability leads to an unexpected process crash, causing a denial-of-service condition.

Remediation

Users can update to macOS Sequoia 15.7.4, iOS 18.7.5, iPadOS 18.7.5, or macOS Sonoma 14.8.4 to address this vulnerability.