A security researcher from Hoyt LLC has published a system crashing proof-of-concept (PoC) for a critical vulnerability impacting macOS Ventura which could be exploited by threat actors to execute arbitrary code on vulnerable systems. The flaw, tracked as CVE-2022-26730, is an improper validation of inputs vulnerability that occurs when processing International Color Consortium (ICC) profiles via Mac’s ColorSync Utility. An ICC profile is a dataset that characterizes a color input or output device, meaning that a device that displays color can be assigned an ICC color profile, which defines the color gamut being displayed by these devices. A threat actor could exploit this vulnerability by sending a maliciously crafted image to a vulnerable device, leading to memory corruption and the ability to execute arbitrary code. This flaw has been successfully patched, and CTIX analysts recommend any macOS Ventura users ensure they are running the most recent versions of their operating systems. This flaw received a CVSS score of 8.8/10, and the published PoC is only for causing a system crash, so functional PoCs may be released in the future.