Kernel-memory disclosure via Audio out-of-bounds read

Out-of-bounds read in Apple Audio across affected operating-system releases allows local users to read kernel memory through a malicious app. Apple identifies the locus as Audio and says inadequate bounds checking permitted the read, but has not published the affected routine or input path. Local execution of a malicious app is required; the disclosed consequence is kernel-memory disclosure, with no vendor-reported write or code-execution impact.