CVE-2025-46298
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: Hossein Lotfi (@hosselot) of Trend Micro Zero Day Initiative, Nan Wang (@eternalsakura13)
| Attribute | Value |
|---|---|
| CVE | CVE-2025-46298 |
| Bugzilla | 301468 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | a1a6185cc83ec556… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/JavaScriptCore/dfg/DFGObjectAllocationSinkingPhase.cpp
Test Files
JSTests/stress/array-sink-conditional-initialization.jsJSTests/stress/array-sink-diamond-initialization-then-read.jsJSTests/stress/array-sink-read-uninitialized-hole.js