CVE-2026-43705

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to memory corruption

Researchers: dr3dd

Attribute Value
CVE CVE-2026-43705
Bugzilla 314528
Component WebCore
Bug Class TypeConfusion
Severity medium
Commit 8fd92b1021d310b2…
Advisory Apple Advisory

Root Cause Analysis

A type confusion issue was addressed with improved checks.

Files Changed

Source Files

  • Source/WebCore/Modules/streams/TransformStream.cpp

Test Files

  • LayoutTests/streams/transform-stream-poisoned-iterator-crash-expected.txt
  • LayoutTests/streams/transform-stream-poisoned-iterator-crash.html