An out‑of‑bounds read occurs when Xcode parses a maliciously crafted binary, prompting an unexpected tool termination. The flaw allows an attacker to cause Xcode to crash, effectively denying service to developers who rely on the IDE. No data exfiltration or modification is indicated; the primary risk is loss of availability. The CVSS score is 3.3, reflecting a low severity denial of service risk.

Apple Xcode is affected, specifically all installations prior to version 27, which includes the production releases available before the fix. The issue is specifically associated with the binary parsing component of Xcode and does not affect other Apple development tools.

The EPSS score is < 1%, indicating a low likelihood of. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local: an attacker must supply a specially crafted binary that Xcode will parse, usually when the IDE loads a project or opens a file. Because the flaw induces a crash rather than granting code execution, the risk is primarily a denial‑of‑service scenario and may be mitigated by preventing Xcode from automatically processing untrusted files.