CVE-2026-43712
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: Kwak Kiyong, Song nuri, Tristan Madani (@TristanInSec) from Talence Security
| Attribute | Value |
|---|---|
| CVE | CVE-2026-43712 |
| Bugzilla | 314235 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | e96472d9cab94158… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/JavaScriptCore/wasm/WasmGlobal.hSource/JavaScriptCore/wasm/WasmTable.cppSource/JavaScriptCore/wasm/WasmTable.h
Test Files
JSTests/wasm/gc/transitive-type-retention-global.jsJSTests/wasm/gc/transitive-type-retention-table.js