Technical impact
A double free error in memory management has been identified in macOS Golden Gate. The flaw can cause the operating system to terminate unexpectedly, resulting in a service interruption for all users on the infected system. This vulnerability is a classic double free condition, an instance of improper deallocation that can destabilize system execution.
Affected Systems
Apple macOS, specifically the Golden Gate release. The issue is fixed in macOS Golden Gate 27 and earlier versions are potentially vulnerable.
Risk and Exploitability
The likely attack vector is a malicious application that triggers the double free condition; the exact exploitation path is not detailed in the advisory. The EPSS score of < 1% indicates a very low probability of exploitation. The vulnerability is not listed in the CISA KEV, and the CVSS score of 5.5 indicates moderate severity vulnerability, contributing to potential service disruption.
