CVE-2026-20664
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: Yeonghyeon Choi, Daniel Rhea, Söhnke Benedikt Fischedick (Tripton), Emrovsky & Switch3301, Yevhen Pervushyn
| Attribute | Value |
|---|---|
| CVE | CVE-2026-20664 |
| Bugzilla | 306136 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | 6b357f32c6075bb8… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/JavaScriptCore/runtime/ArrayBuffer.cppSource/JavaScriptCore/runtime/JSArrayBufferView.hSource/JavaScriptCore/runtime/JSArrayBufferViewInlines.h
Test Files
JSTests/wasm/stress/resizable-buffer-grow-view-refresh.js