An out‑of‑bounds write vulnerability was identified in macOS that occurs during file parsing. The flaw, classified as CWE‑787, allows a malformed file to corrupt memory, causing the target application to terminate unexpectedly. The primary consequence is a denial‑of‑service effect for the affected application, compromising availability rather than confidentiality or integrity.

Apple macOS is affected. The issue has been resolved in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. Systems running earlier releases of any of these macOS families are vulnerable and must be updated to the specified fixed versions.

The CVSS score of 5.5 indicates a moderate severity. The EPSS score of less than 1% suggests a low probability of exploitation at the current time, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is a local or remote application that parses user‑supplied files; an attacker must supply a crafted file that triggers the out‑of‑bounds write, leading to application crash. No mention of remote code execution or privilege escalation is provided, so the risk remains confined to local denial of service for the apps that process the file.