CVE-2026-28901

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected process crash

Researchers: Aisle offensive security research team (Joshua Rogers, Luigino Camastra, Igor Morgenstern, and Guido Vranken), Maher Azzouzi, Ngan Nguyen of Calif.io

Attribute	Value
CVE	CVE-2026-28901
Bugzilla	310207
Component	JSC
Bug Class	LogicError
Severity	medium
Commit	c5d68122b2faf486…
Advisory	Apple Advisory

Root Cause Analysis

The issue was addressed with improved memory handling.

Files Changed

Source Files

• Source/JavaScriptCore/wasm/WasmTypeDefinition.cpp

Test Files

• JSTests/wasm/regress/310207.js