ummm. Could this flaw be attacked via the web? And Apple cannot fix it?
Essentially, the attacker must have access to another buffer overflow of some sort.
This is only a bypass for a specific line of defense, called PAC - a security feature introduced recently in ARM 8.3. By itself, it is not enough to attack a system at all.