Short Circuit

An authorization issue exists due to improper state management, which could allow an application to access sensitive user data.

A null pointer dereference occurs due to insufficient validation. An attacker in physical proximity may exploit this to cause a denial-of-service, which is a condition where the system becomes unavailable or crashes.

An authorization issue exists where improved access control is required to prevent an app from potentially accessing sensitive user data.

A memory corruption issue exists where parsing a file can lead to unexpected application termination or arbitrary code execution. This is caused by improper memory handling.

A permissions issue exists where an application may be able to access sensitive user data. This may allow the reading of most of the `/usr/libexec` directory.

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.