The vulnerability is an out‑of‑bounds write in macOS’s file parser, which can be triggered by a maliciously crafted file. When the parser processes such a file, it writes outside the intended memory area and can cause the application to terminate unexpectedly. The weakness is a classic out‑of‑bounds write (CWE‑787) and can lead to a denial of service through application crashes. No remote execution or data disclosure is described.

The flaw is present in Apple macOS releases prior to the patches applied in macOS Sequoia 15.3, macOS Sonoma 14.7.3, and macOS Ventura 13.7.3. Users running older versions of these operating systems are vulnerable.

The CVSS score of 5.5 indicates a moderate impact. The EPSS score is less than 1 %, suggesting a low likelihood of exploitation at this time. The vulnerability is not listed in CISA’s KEV catalog. The attack vector is likely local, involving delivery of a malicious file that is parsed by a privileged segment of the OS. An attacker could provoke a denial‑of‑service condition by causing applications to crash, which may be used as part of a larger sequence of attacks.