The vulnerability is an out‑of‑bounds read (CWE‑125) that allows an application to read data beyond a buffer boundary and potentially access coprocessor memory. A successful exploit could expose sensitive information stored in the coprocessor, such as cryptographic keys or personal data, thereby compromising confidentiality. The flaw affects memory integrity but does not provide execution privileges. The CVSS score of 5.5 indicates a moderate impact.

The flaw is present in Apple macOS versions older than macOS Tahoe 26; macOS Tahoe 26 and later contain a fix with improved bounds checking. Any macOS installation using a version prior to this release is susceptible.

The EPSS score of less than 1% reflects a very low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog, indicating no proven active exploitation. The likely attack vector is local or requires a malicious application; a malicious app could trigger the read to obtain coprocessor data. Because the issue does not enable code execution, the risk is moderate but merits remediation to protect confidential coprocessor information.