The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination.
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128068