A buffer overflow in macOS was discovered; the overflow may corrupt memory and cause unexpected application termination. The weakness stems from insufficient size validation during buffer handling, identified as a CWE-120 type vulnerability. The impact is primarily instability and possible corruption of data in memory, rather than immediate execution of malicious code.

The affected systems are Apple macOS installations running versions prior to macOS Tahoe 26.4, the version that includes the fix for the buffer overflow. Vendors or administrators should verify the macOS version on all affected machines and plan the applicable update.

The CVSS score of 6.2 places this vulnerability in the medium severity range. The EPSS score is less than 1%, indicating a low probability of exploitation in the wild, and it is not listed in the CISA KEV catalog. The attack vector is not explicitly stated in the available data; it is likely local or requires a user-supplied payload, but detailed exploitation scenarios are not provided.