An integer overflow in macOS can cause an application to trigger an unexpected system termination, effectively crashing the operating system. This failure of input validation permits the overflow to be exploited, which results in a denial‑of‑service impact on the affected system. The vulnerability does not directly affect confidentiality or integrity, but it does impair availability for any user or process on the machine.

Apple’s macOS operating system is affected in versions prior to the updates that include this fix. The issue was addressed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, so any installation predating those releases is vulnerable.

The CVSS score of 6.2 classifies the vulnerability at moderate severity, while the EPSS score of less than 1% indicates a low probability of current exploitation. It is not listed in the CISA KEV catalog. The attack vector is not expressly described, but the description indicates that an application capable of supplying malicious input could trigger the overflow, implying a local or privileged application level attack.