CVE-2025-31278
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to memory corruption
Researchers: Yuhao Hu, Yan Kang, Chenggang Wu, and Xiaojie Wei
| Attribute | Value |
|---|---|
| CVE | CVE-2025-31278 |
| Bugzilla | 291742 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | 90aa8070e1b674f9… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/JavaScriptCore/dfg/DFGAvailabilityMap.cppSource/JavaScriptCore/dfg/DFGAvailabilityMap.hSource/JavaScriptCore/dfg/DFGOSRAvailabilityAnalysisPhase.cppSource/JavaScriptCore/dfg/DFGPutStackSinkingPhase.cppSource/JavaScriptCore/ftl/FTLLowerDFGToB3.cppSource/JavaScriptCore/ftl/FTLOSRExitCompiler.cpp
Test Files
JSTests/stress/osr-availability-heap-materialization-clobbered.js