Impact
The vulnerability is an improper memory handling flaw that can lead to a buffer overrun. An application's misuse of memory buffers could corrupt the memory of the system coprocessor, exposing the system to instability or compromising confidentiality and integrity. The weakness reflects a classic buffer overflow (CWE‑119).
Affected Systems
Apple’s macOS operating system is affected. The issue was fixed in macOS Sequoia 15.4, so versions prior to 15.4 are at risk. The vulnerability could impact any application running on macOS that interacts with coprocessor memory. All users of affected macOS releases need to consider this.
Risk and Exploitability
The CVSS score of 9.1 places this vulnerability in the critical range. Each attacker would need to exploit the flaw via a memory boundary violation, usually from inside an application, which makes it a local or privileged attacker scenario. The EPSS score is below 1%, indicating low public exploitation likelihood currently. The vulnerability is not cataloged in CISA’s KEV, which means it has not yet been widely exploited in the wild. However, the high severity score suggests that attackers who discover or develop an exploit would have a powerful attack vector.
OpenCVE Enrichment
EUVD