Steps to reproduce:
1. Open the “users attached project”
2. Open “SampleScene”
3. Enter Play Mode
4. Observe the crash

Reproducible with versions: 2022.3.56f1, 6000.0.35f1, 6000.1.0b3

Reproducible on: macOS 15.1.1 (M1 Max)
Not reproducible on: macOS 15.2 Sequoai (Intel)

First few lines of stack traces:

{noformat}#0 0x00000100fcc228 in SerializationCache::WriteQueueForTransferSignatureIntoCache(TransferRequestSignature const&, ScriptingClassPtr, SerializationCache::Data&)
#1 0x00000100f77a04 in void TransferScriptingObject<StreamedBinaryWrite>(StreamedBinaryWrite&, ScriptingObjectPtr, ScriptingClassPtr, SerializationCache::Data*&)
#2 0x00000100f777f4 in void SerializableManagedRefTransfer::TransferScriptingObjectWithSerializedRefSupport<StreamedBinaryWrite>(Object*, SerializableManagedRef&, StreamedBinaryWrite&)
#3 0x00000100f6f4c8 in void SerializableManagedRefTransfer::Transfer<SerializableManagedRefBackupGenerator>(Object*, SerializableManagedRef&, StreamedBinaryWrite&, bool)
#4 0x000001010a360c in WriteObjectToVector(Object const&, core::vector<unsigned char, 0ul>&, TransferInstructionFlags, BuildTargetSelection){noformat}

{noformat}#0 0x000001058351f4 in block_locate_free
#1 0x00000103253a20 in DynamicHeapAllocator::Allocate(unsigned long, int)
#2 0x00000103253fac in DynamicHeapAllocator::Reallocate(void*, unsigned long, int)
#3 0x00000103257678 in MemoryManager::Reallocate(void*, unsigned long, unsigned long, MemLabelId, AllocateOptions, char const*, int)
#4 0x00000103256fb0 in realloc_internal(void*, unsigned long, unsigned long, MemLabelId const&, AllocateOptions, char const*, int){noformat}

{noformat}#0 0x000001051a3ab8 in block_locate_free
#1 0x00000102ffaaa4 in DynamicHeapAllocator::Allocate(unsigned long, int)
#2 0x00000102ffda94 in MemoryManager::Allocate(unsigned long, unsigned long, MemLabelId const&, AllocateOptions, char const*, int)
#3 0x00000102ffd11c in malloc_internal(unsigned long, unsigned long, MemLabelId const&, AllocateOptions, char const*, int)
#4 0x00000102b8d21c in core::StringStorageDefault<char>::grow(unsigned long){noformat}