The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause a denial-of-service.
The vulnerability is related to excessive resource consumption (CWE-400 — Uncontrolled Resource Consumption). Improper memory handling in macOS allows an application to trigger uncontrolled memory consumption. This results in system overload and instability or unavailability. The issue was fixed by improving memory management mechanisms.
An attacker who tricks a user into running a malicious application can cause a denial-of-service — instability or crash of the macOS operating system.
The system should be updated to macOS Sequoia 15.6, macOS Sonoma 14.7.7, or macOS Ventura 13.7.7 according to information published by Apple at support.apple.com/en-us/124149, 124150, and 124151.
Apple macOS Sequoia before version 15.6, Apple macOS Sonoma before version 14.7.7, Apple macOS Ventura before version 13.7.7.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HApple macOS
OSApple< 13.7.714.0 – 14.7.7 (bez)15.0 – 15.6 (bez)
Related vulnerabilities
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu
Apple: Obejście Pointer Authentication w iOS, macOS i innych platformach
Apple — memory corruption (RCE) w przetwarzaniu strumieni audio
Apple WebKit: out-of-bounds write umożliwiający ucieczkę z sandbox przeglądarki