CVE-2024-23248 affects Apple macOS Sonoma and involves a memory handling flaw that can be triggered by processing a file. This flaw may cause the application to terminate unexpectedly (denial-of-service) or potentially allow disclosure of memory contents. Apple fixed this vulnerability by improving memory handling in the macOS Sonoma 14.4 update. The CVSS 3.1 base score is 6.5, with attack vector network, low attack complexity, no privileges required, user interaction required, scope unchanged, and impact limited to availability (denial-of-service) but no confidentiality or integrity impact.

The vulnerability can cause denial-of-service or potential disclosure of memory contents when a file is processed on affected macOS Sonoma systems. This could disrupt application availability or leak sensitive memory data. There are no reports of active exploitation. The impact is limited to availability and potential information disclosure, with no integrity or privilege escalation effects noted.

Apple has released an official fix for this vulnerability in macOS Sonoma 14.4. Users and administrators should apply this update to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.