CVE-2025-31206
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected Safari crash
Researchers: Yuhao Hu, Yan Kang, Chenggang Wu, Xiaojie Wei
| Attribute | Value |
|---|---|
| CVE | CVE-2025-31206 |
| Bugzilla | 290834 |
| Component | JSC |
| Bug Class | TypeConfusion |
| Severity | medium |
| Commit | 2a545562709ac7a6… |
| Advisory | Apple Advisory |
Root Cause Analysis
A type confusion issue was addressed with improved state handling.
Files Changed
Source Files
Source/JavaScriptCore/dfg/DFGFixupPhase.cppSource/JavaScriptCore/dfg/DFGSpeculativeJIT.cppSource/JavaScriptCore/ftl/FTLLowerDFGToB3.cpp
Test Files
JSTests/stress/dfg-get-global-object-should-use-object-edge.js