Arbitrary code execution via buffer overflow

A buffer overflow in Apple iOS and iPadOS before 14.5 allows local users to execute arbitrary code via a malicious application. Apple identifies a buffer overflow and a logic issue addressed with improved state management, but does not name the affected component or parsing operation. Exploitation requires execution of a malicious application on the device; the documented impact is arbitrary code execution, with no evidence of a remote network path.