A buffer overflow in macOS software was identified, where insufficient bounds checking allowed an attacker to trigger arbitrary memory corruption, leading to unexpected system termination. The vulnerability specifically impacted the system’s ability to safely handle buffer boundaries, and once exploited, could cause the operating system to crash, interrupting user activity and potentially leading to data loss or service interruption. The weakness is classified as CWE‑120, which typically indicates untrusted input is written beyond an intended buffer limit.

Apple’s macOS operating system is affected, with the flaw present in versions older than macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26. Users running any of these earlier releases are potentially vulnerable; the fix is delivered in the listed newer updates.

The CVSS score of 5.5 suggests moderate severity. The EPSS score of less than 1% indicates exploitation is currently unlikely, and the vulnerability is not listed in the CISA KEV catalog. While the description does not specify how the attacker would gain a foothold, it is reasonable to infer that the attack vector involves a malicious or compromised application running with user privileges, rather than an external network-based exploit.