The vulnerability is an out-of-bounds write that was mitigated by adding stricter bounds checks. If executed, it can corrupt memory and cause the operating system to terminate unexpectedly, effectively denying service to the user. The weakness is a classic buffer overflow, specifically CWE-787.

Apple's macOS is affected. Versions before macOS Sequoia 15.7.8 and before macOS Tahoe 26.6 contain the flaw. All deployments running these product releases are at risk until the supported security update is applied.

Exact exploitation data is not available; the EPSS score is <1% and the vulnerability is not in CISA's KEV catalog. The CVSS score of 9.8 indicates critical severity. The nature of the flaw suggests that an attacker would need to supply malformed data to a vulnerable application or launch a malicious app to trigger the crash. No public exploit proof‑of‑concept or active exploitation campaigns have been reported as of the data snapshot. The risk is primarily that a compromised or rogue application could bring the system down, but it does not enable remote code execution or data exfiltration.