The vulnerability is an out‑of‑bounds write that allows a local application to overwrite protected sections of the filesystem, bypassing the intended bounds checks. Because the affected component can alter critical files or directories, it can compromise system integrity. The flaw is identified as CWE‑787, a buffer overwrite weakness.

Apple macOS releases prior to the fixed versions are affected. The issue exists in macOS Sequoia, Sonoma, and Tahoe, versions older than 15.7.5, 14.8.5, and 26.4 respectively. Systems running these older versions may be vulnerable.

The CVSS score of 5.5 indicates moderate severity, while an EPSS score below 1% points to a low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector requires a local application with privileges sufficient to trigger the out‑of‑bounds write; it is not a purely remote flaw.