CVE-2026-28903

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected process crash

Researchers: Mateusz Krzywicki (iVerify.io)

Attribute	Value
CVE	CVE-2026-28903
Bugzilla	310303
Component	JSC
Bug Class	LogicError
Severity	medium
Commit	fa0214fe9a50ec15…
Advisory	Apple Advisory

Root Cause Analysis

The issue was addressed with improved memory handling.

Files Changed

Source Files

• Source/JavaScriptCore/b3/air/AirFixObviousSpills.cpp

Test Files

• JSTests/stress/fixobviousspills-earlydefs.js