Technical impact
The vulnerability is an out‑of‑bounds read in macOS, indexed by CWE‑125. The flaw occurs when the system does not perform proper bounds checking, allowing a developer to read memory past the intended buffer. An attacker that can reach the target via the local network can trigger the bug and either cause a process to terminate unexpectedly or read portions of process memory that should be inaccessible, potentially leaking sensitive information.
Affected Systems
Apple macOS environments are affected. The issue has been addressed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2; systems running earlier releases remain vulnerable.
Risk and Exploitability
The CVSS score of 6.8 indicates a moderate severity. The EPSS score is listed as < 1%, suggesting a low probability of exploitation. The vulnerability is not present in the CISA KEV catalog. Attackers need local network access to trigger the bug, which is sufficient to cause process crashes or accidental leakage of memory. The risk is moderate to high for machines exposed to that network, but the overall likelihood remains low given the limited exploitation window and the need for local access.
