CVE-2024-54505

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to memory corruption

Researchers: Gary Kwong

Attribute	Value
CVE	CVE-2024-54505
Bugzilla	282661
Component	JSC
Bug Class	TypeConfusion
Severity	medium
Commit	2d5e29d47324834c…
Advisory	Apple Advisory

Root Cause Analysis

A type confusion issue was addressed with improved memory handling.

Files Changed

Source Files

• Source/JavaScriptCore/dfg/DFGBackwardsPropagationPhase.cpp

Test Files

• JSTests/stress/string-add-conversion-unused.js