CVE-2026-43716
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected Safari crash
Researchers: Maher Azzouzi, Tuan and Duc from Calif.io, OpenAI Codex Security - Amy Burnett, Evan Lambert
| Attribute | Value |
|---|---|
| CVE | CVE-2026-43716 |
| Bugzilla | 313473 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | a012babd4f1611a4… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/JavaScriptCore/runtime/ArrayBuffer.cppSource/JavaScriptCore/runtime/ArrayBuffer.hSource/JavaScriptCore/runtime/JSArrayBuffer.cppSource/JavaScriptCore/runtime/JSArrayBuffer.hSource/JavaScriptCore/runtime/JSArrayBufferPrototype.cppSource/JavaScriptCore/wasm/WasmMemory.hSource/JavaScriptCore/wasm/js/JSWebAssemblyMemory.cpp
Test Files
JSTests/wasm/stress/wasm-resizable-buffer-resize-after-gc.js