A buffer overflow occurs when macOS processes a specially crafted image file, leading to corruption of process memory. This type of flaw, identified as CWE‑119, can allow an attacker to potentially execute arbitrary code or cause a denial of service by destabilizing the affected application. The vulnerability is triggered by normal image handling routines and does not require elevated privileges.

Apple macOS environments are impacted, specifically versions prior to the Sequoia 15.6 release where the memory handling fix is applied. The vulnerability does not affect later patched versions.

With a CVSS score of 8.8 the vulnerability is considered high severity. The EPSS score of less than 1 percent indicates a low probability of exploitation at this time, and it has not been listed in the CISA KEV catalog. Attacks would likely involve delivering a malicious image to any application capable of rendering images, such as web browsers or image editors. Verification of whether a target system has received the Sequoia 15.6 update is critical to assess exposure.