EUVD-2026-78109
GHSA-3292-2mh3-665r
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Triggering requires a user to mount a local file, so AV:L is more accurate than the supplied AV:N; crash-only gives A:H with no C/I impact.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
5DescriptionCVE.org
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a malicious disk image may cause unexpected system termination.
AnalysisAI
Mounting a crafted disk image on unpatched macOS releases triggers an out-of-bounds write in the code that parses disk image content, causing unexpected system termination (crash) on macOS Sequoia, Sonoma and Tahoe. The flaw is rated CVSS 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) - a user-interaction-dependent denial-of-service with no confidentiality or integrity impact, and CISA's SSVC assessment marks exploitation as 'none' and automatable as 'no'. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two things: (1) a macOS host running a build below 15.7.8 (Sequoia), 14.8.8 (Sonoma) or 26.6 (Tahoe), and (2) a victim who actually mounts (opens/attaches) a specifically crafted malicious disk image - the CVSS UI:R metric and the advisory wording 'mounting a malicious disk image' make user interaction mandatory. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals point to a moderate, real-but-narrow risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to the vendor-fixed builds: macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, or macOS Tahoe 26.6, as documented in Apple's advisories https://support.apple.com/en-us/128067, https://support.apple.com/en-us/128071 and https://support.apple.com/en-us/128072; patching requires no configuration changes and resolves the bounds-checking defect outright. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today