Apple iOS and iPadOS Buffer Overflow Vulnerability in Telephony Framework Allowing Kernel Memory Corruption

A buffer overflow vulnerability has been identified in the Telephony framework of Apple iOS and iPadOS. This issue allows a remote user to cause unexpected system termination or corrupt kernel memory. The vulnerability has been addressed with improved bounds checking and affects iOS devices including iPhone 11 and later, various iPad Pro models, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later.

Impact

Exploitation of this vulnerability can lead to unexpected system termination or corruption of kernel memory.

Remediation

Users can update to iOS 26.4 or iPadOS 26.4 to address this vulnerability.