Description

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "4.3",
  "pubDate": "2026-08-21T01:16:59.830Z",
  "pubdate": "2026-08-21T01:16:59.830Z",
  "executiveSummary": "A denial of service vulnerability exists in macOS involving the processing of maliciously crafted files.\nSuccessful exploitation of this flaw leads to unexpected application termination.\nThe vulnerability affects macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4.\nThe risk implication is primarily localized service disruption, impacting application availability and user productivity.\nAttacker capabilities require the delivery and processing of a specifically structured malicious file.\nExploitation requirements include target interaction or mechanisms that cause the vulnerable application to parse the crafted file.",
  "technicalDetails": "The root cause of the vulnerability stems from inadequate input validation and boundary checks during the parsing of file formats within the affected components.\nWhen an application processes a maliciously crafted file, the lack of sufficient checks triggers memory corruption, unhandled exceptions, or logic errors during parsing routines.\nThe attack flow begins when an attacker delivers a specially crafted file to a target system via vectors such as email, web downloads, or file sharing.\nUpon opening or processing the file, the vulnerable component attempts to parse the malicious structure without proper validation of input lengths, headers, or internal offsets.\nThis malformed input forces the application into an invalid state, leading to a crash or unexpected application termination.\nThe vulnerable component involves file parsing and handling routines across the affected operating systems.\nAffected versions include macOS Sequoia before 15.7.5, macOS Sonoma before 14.8.5, and macOS Tahoe before 26.4.\nAuthentication requirements, specific privilege levels, and network exposure depend on the local or remote vector utilized to deliver the file to the parsing application.\nThe payload behavior is focused on causing a denial of service through application crashes rather than arbitrary code execution.\nPost-exploitation impact is limited to process termination and potential data loss if unsaved work is discarded during the unexpected crash."
}