Impact
An out‑of‑bounds write vulnerability in macOS allows an application to write beyond the limits of a memory buffer, potentially corrupting internal state and triggering unexpected system termination. The flaw is rooted in insufficient bounds checking, and the resulting crash can serve as a denial‑of‑service to the operating system.
Affected Systems
Apple macOS is affected. Versions prior to macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 contain the flaw. Users running earlier releases are impacted.; the references supplied list the patches that address this issue.
Risk and Exploitability
The CVSS score of 9.8 indicates a high severity rating. Based on the EPSS score of less than 1%, the likelihood of exploitation is inferred to be very low. Because the vulnerability is not listed in the CISA KEV catalog, it is inferred that no widespread exploits have been observed. Based on the description, it is inferred that an attacker would need access to a vulnerable application to overflow memory, which typically denotes a local or compromised application scenario. Overall, the risk is relatively low in terms of exploitability, yet the potential impact of a system crash warrants timely remediation.
OpenCVE Enrichment