The issue is caused by a buffer overflow in the Sandbox component of the operating systems, allowing an app to overwrite arbitrary files. This is due to insufficient bounds checks. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.