A memory corruption flaw in macOS triggers heap corruption when a maliciously crafted file is processed. The description does not state that arbitrary code execution is guaranteed, but the type of vulnerability (CWE‑122) could potentially be leveraged for unintended memory manipulation or execution if an attacker succeeds. The impact therefore revolves around integrity and possible control of the affected system.

Apple’s macOS operating system is vulnerable on all releases prior to macOS Sequoia 15.6; the issue has been resolved in Sequoia 15.6 and later versions.

The CVSS score of 7.8 indicates high severity, yet the EPSS score of less than 1% suggests a low probability of current exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation would likely require local access to supply a specially crafted file; an attacker would need to deliver or induce the system to open such a file. No publicly available exploit is documented, and no workaround is provided.