The vulnerability arises from insufficient bounds checking in a kernel component, enabling an application to read beyond its intended memory boundaries. This permits an attacker to obtain sensitive kernel data, potentially exposing confidential information and facilitating further escalation. The flaw is classified as a memory disclosure weakness.

Apple macOS is affected, with the issue resolved in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Any system running a previous version of these macOS releases is at risk.

The CVSS score is 5.5, indicating moderate severity, and the EPSS score is less than 1%, suggesting a low probability of exploitation. The vulnerability is not in CISA's KEV catalog. Based on the description, the likely attack vector is local via a compromised application that can trigger the kernel bounds check failure; no publicly known remote exploitation has been documented.