The vulnerability is an out-of-bounds read caused by insufficient bounds checking in macOS. If triggered, it can lead to abrupt system termination, potentially crashing critical processes or the entire operating system. Based on the description, it is inferred that an attacker could trigger the fault via a malicious application; no remote or network attack vector is explicitly mentioned. The primary consequence is loss of availability rather than confidentiality or integrity.

Any macOS installation smaller than version Tahoe 26 is affected. The fix is referenced as being applied in macOS Tahoe 26; earlier releases have not incorporated the necessary bounds checking.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, suggesting that active exploitation is not documented. Nonetheless, the potential to cause system termination is significant; a successful exploit would stop services and affect all users on the affected machine. Without a known public exploit, the immediate risk is moderate, but the impact remains severe. An attacker could deliver a crafted application or exploit the flaw during execution to trigger the crash.