A buffer overflow in macOS leads to unexpected system termination or corrupt kernel memory. The vulnerability, a CWE-120 type buffer overflow, results from improper memory handling that allows malicious input to overwrite memory, potentially causing a crash or kernel corruption.

The flaw affects Apple macOS versions prior to Sequoia 15.4, Sonoma 14.7.5, and Ventura 13.7.5. Any system running earlier releases of these macOS editions is vulnerable.

The CVSS score of 5.6 indicates moderate severity. The EPSS score of less than 1% suggests a low likelihood of real‑world exploitation at this time, and the vulnerability is not listed in CISA KEV. Attackers would need to trigger the buffer overflow; however, the exact attack path is not detailed in the advisory. The likely attack vector is through a malicious application or exploit code that reaches the vulnerable code path, an inference based on the nature of the buffer overflow.