The vulnerability is a buffer overflow in macOS kernel code that could be triggered by a remote attacker. Exploitation of the flaw may corrupt kernel memory or cause the system to terminate unexpectedly. The weakness is a classic stack-based buffer overflow, classified as CWE‑120.

Apple macOS versions released prior to macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6 are affected. Systems running any earlier major release are susceptible to this flaw.

The CVSS score of 9.8 indicates critical severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation. The vulnerability is not listed in CISA's KEV catalog. Based on the description, the likely attack vector is remote, where an attacker can provide crafted data—potentially via network services to trigger the overflow without local privileges.