The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to cause unexpected system termination.
The issue consists of a lack of proper memory resource control during application operation processing. A malicious or compromised application can excessively exploit system memory resources, leading to system instability and unexpected termination. Apple resolved the issue by improving memory management mechanisms in macOS Sequoia 15.4.
An attacker (or malicious application) can cause unexpected termination of the operating system, resulting in loss of availability (Denial of Service). The high CVSS score also indicates potential risk of data confidentiality and integrity breaches.
Update the system to macOS Sequoia 15.4 or later. The update is available through the Software Update mechanism in macOS or on the Apple support page: https://support.apple.com/en-us/122373
Apple macOS Sequoia in versions earlier than 15.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HApple macOS
OSApple< 15.4
Related vulnerabilities
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu
Apple: Obejście Pointer Authentication w iOS, macOS i innych platformach
Apple — memory corruption (RCE) w przetwarzaniu strumieni audio
Apple WebKit: out-of-bounds write umożliwiający ucieczkę z sandbox przeglądarki