A type confusion flaw was discovered in macOS, leading to unexpected application termination when exploited, effectively denying service to the affected programs. The bug was remedied by adding stricter type checks, but until patched systems remain vulnerable. The weakness is identified as CWE-400, highlighting improper resource handling that can be triggered under specific conditions.

Apple macOS is the sole vendor affected. Systems running macOS Sequoia prior to 15.4, macOS Sonoma prior to 14.7.5, or macOS Ventura prior to 13.7.5 are susceptible. The vulnerability is mitigated in the stated patch releases and later versions.

The CVSS base score of 9.8 marks this flaw as critical, while the EPSS score of < 1% indicates a very low probability that it is currently being exploited, yet the impact remains severe. The vulnerability is not listed in the CISA KEV catalog, so there is no known active exploitation curve. Attack vectors are not disclosed in the description, so it may require local user interaction or privileged access; the exact vector is thus inferred as likely local or requiring application-level privilege.