The vulnerability is an out‑of‑bounds write that bypasses bounds checking, allowing an application to write data beyond the intended memory buffer. This flaw can corrupt kernel memory, leading to arbitrary code execution or delivering a kernel panic that terminates the system. Because the corruption occurs in kernel space, an attacker can potentially elevate privileges or cause denial of service.

Apple macOS products are affected. The issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5 and macOS Ventura 13.7.5, so any earlier releases of those operating systems are vulnerable. Specific vendors and product names are Apple macOS, with vulnerable versions including every build before the patched releases.

The CVSS score of 9.8 classifies this as a critical vulnerability. The EPSS score of less than 1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack requires an application with sufficient privilege to trigger the out‑of‑bounds write, so the likely attack vector is local or involves malicious software installed by the user.