Based on the description, a buffer overflow was identified in the image processing component of macOS. The issue arises whenever a maliciously crafted image is processed, allowing an attacker to potentially execute arbitrary code on the affected system. The vulnerability stems from insufficient bounds checking during image parsing, a classic buffer overflow weakness.

Apple macOS systems are impacted, specifically versions that have not yet applied the security updates that introduce enhanced bounds checking. The fixes are delivered in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6, meaning earlier releases in these macOS lineups are vulnerable.

The CVSS score of 7.8 demonstrates high severity, and the EPSS score of less than 1% indicates a low but non‑zero exploitation probability. Nevertheless, arbitrary code execution remains a severe risk, especially on systems with unpatched image processing libraries. The vulnerability is not listed in the CISA KEV catalog, but enterprises should still consider it a priority because of its potential impact.