CVE-2025-24213

Overview

Advisory: Apple Security Advisory

Impact:

Description: A type confusion issue could lead to memory corruption

Researchers: Google V8 Security Team

Attribute	Value
CVE	CVE-2025-24213
Bugzilla	286694
Component	WebCore
Bug Class	TypeConfusion
Severity	medium
Commit	c1b04541303ec183…
Advisory	Apple Advisory

Root Cause Analysis

This issue was addressed with improved handling of floats.

Files Changed

Source Files

• Source/WTF/wtf/PlatformHave.h
• Source/WebCore/Sources.txt
• Source/WebCore/WebCore.xcodeproj/project.pbxproj
• Source/WebCore/platform/audio/DenormalDisabler.cpp
• Source/WebCore/platform/audio/DenormalDisabler.h

Test Files

• LayoutTests/platform/ios/imported/w3c/web-platform-tests/webaudio/the-audio-api/the-audioworklet-interface/audioworklet-denormals.https.window-expected.txt
• LayoutTests/platform/mac/TestExpectations
• LayoutTests/webaudio/audoworklet-denormal-float-values-expected.txt
• LayoutTests/webaudio/audoworklet-denormal-float-values.html