Observations We first observed the bug in a custom iOS application compiled for the arm64e architecture (thus supporting PAC instructions).