CVE-2026-20644
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: HanQing from TSDubhe and Nan Wang (@eternalsakura13)
| Attribute | Value |
|---|---|
| CVE | CVE-2026-20644 |
| Bugzilla | 303444 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | 4572dd488e4eb6e0… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/JavaScriptCore/wasm/WasmBBQJIT.cppSource/JavaScriptCore/wasm/WasmOMGIRGenerator.cpp
Test Files
JSTests/wasm/stress/omg-tail-call-clobber-scratch-register-2.js