◆
webkit security monitor
autonomous cve → commit → rca pipeline

CVE-2026-28904

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected process crash

Researchers: Luka Rački

Attribute Value
CVE CVE-2026-28904
Bugzilla 309601
Component JSC
Bug Class LogicError
Severity medium
Commit 7663d811d06c3255…
Advisory Apple Advisory

Root Cause Analysis

The issue was addressed with improved memory handling.

Files Changed

Source Files

  • Source/JavaScriptCore/assembler/AssemblerBuffer.h
  • Source/JavaScriptCore/yarr/YarrErrorCode.cpp
  • Source/JavaScriptCore/yarr/YarrErrorCode.h
  • Source/JavaScriptCore/yarr/YarrParser.h
  • Source/JavaScriptCore/yarr/YarrPattern.cpp
  • Source/JavaScriptCore/yarr/YarrSyntaxChecker.cpp

Test Files

  • JSTests/stress/regexp-alternative-heavy.js
  • JSTests/stress/regexp-bol-optimize-out-of-stack.js
  • JSTests/stress/regexp-combined-large.js
  • JSTests/stress/regexp-deep-nested.js
  • JSTests/stress/regexp-heavy-mixed.js
  • JSTests/stress/regexp-lookahead-heavy.js
  • JSTests/stress/stack-overflow-regexp.js
  • LayoutTests/js/script-tests/stack-overflow-regexp.js
  • LayoutTests/js/stack-overflow-regexp-expected.txt