Impact
A buffer overflow vulnerability was identified in memory handling within macOS, where an application may trigger an unexpected system termination by causing a size validation overflow during a memory write. The flaw does not lead to direct code execution or data theft; its primary effect is service disruption by forcing a crash. The weakness corresponds to improper bounds checking, classified as CWE‑119.
Affected Systems
Apple macOS versions prior to Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 are affected; the patch was incorporated in those releases.
Risk and Exploitability
The CVSS score is 5.5 and the EPSS score is below 1 %. The vulnerability is not listed in CISA KEV, indicating no known public exploitation. The most probable attack vector is local, requiring a malicious application or a compromised user to trigger the overflow. Systems still running legacy macOS releases remain at risk for accidental or intentional crashes.
OpenCVE Enrichment