CVE-2026-43726
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: Utkarsh Pal, Tristan Madani (@TristanInSec) from Talence Security, stratan (@5tratan) of Almamater Technologies, Narendra Singh (@_3P1C), Josef Korbel (Citadelo), Gia Bui (@yabeow) from Calif.io
| Attribute | Value |
|---|---|
| CVE | CVE-2026-43726 |
| Bugzilla | 313857 |
| Component | JSC |
| Bug Class | UAF |
| Severity | medium |
| Commit | a7e4fdb9545042ae… |
| Advisory | Apple Advisory |
Root Cause Analysis
A use-after-free issue was addressed with improved memory management.
Files Changed
Source Files
Source/JavaScriptCore/runtime/ArrayBuffer.cppSource/WebCore/Modules/webaudio/AudioBufferSourceNode.cpp
Test Files
LayoutTests/webaudio/audiobuffersource-detached-buffer-crash-expected.txtLayoutTests/webaudio/audiobuffersource-detached-buffer-crash.html