A stack overflow was reported in macOS caused by insufficient input validation. The vulnerability allows an application that can supply crafted input to corrupt the stack and cause a crash, resulting in a denial of service. The CVE description does not provide details about additional privileges or data disclosure. Based on the wording, the primary impact is loss of availability, and the problem resides in input handling, a classic control‑flow failure.

The vulnerability affects Apple macOS. The affected releases are macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Users running any earlier or later build without the fix are at potential risk.

The flaw is a stack overflow that may be triggered by an application supplying malformed input. The CVE does not detail the specific component or operating conditions required. The CVSS score of 7.1 indicates a high severity. The EPSS score is below 1%, and the issue is not listed in CISA’s KEV catalog, indicating no publicly identified exploitation. Because the attack requires that the vulnerable component process crafted input, an attacker would need some form of execution or local influence to trigger the crash. Upgrading to the patched releases is the most reliable mitigation.