System-privilege code execution via DriverKit bounds failure

An out-of-bounds access in Apple watchOS before 8.6 allows local users to execute arbitrary code with system privileges via a malicious application. The DriverKit component performs insufficient bounds checking when handling application-controlled data, permitting memory access outside the intended buffer. Exploitation requires installation and execution of a malicious application on a compatible Apple Watch; the resulting compromise can reach system-privilege code execution.