A memory corruption flaw that can be triggered by an attacker in physical proximity has been identified in macOS. The vulnerability arises from insufficient input validation, allowing manipulation of a process’s memory space. While the description does not explicitly state the exact consequence, the ability to corrupt process memory represents a significant breach of integrity and could potentially be leveraged by a local attacker to disrupt or tamper with operating system or application behavior.

The flaw affects Apple’s macOS operating system and is present in all releases prior to macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Systems running any unsupported or older macOS versions remain vulnerable until updated to a patched release.

The CVSS score of 3.5 indicates a low severity vulnerability, and the EPSS score is below 1 %, suggesting a low probability of exploitation. The flaw is not listed in the CISA KEV catalog. Because corruption requires physical proximity, the attack surface is confined to local attackers; however, a determined local adversary could exploit the memory corruption to undermine system stability or interfere with privileged processes.